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Outsourcing  may  save  less 
than  you  think.  There  are 
hidden  costs  in  evaluating 
the  vendors,  hiring  contract 
managers,  traveling  over¬ 
seas,  beefing  up  security  and 
paying  severance  benefits  to 
laid-off  workers.  PAGE  39 
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Surprises 


Sun,  HP  Enhance  RISC  Chips, 
But  Opteron  May  Provide  Edge 


As  AMD  chip  gains 
momentum,  HP  may 
have  to  alter  approach 

BY  PATRICK  THIBODEAU 

Sun  Microsystems  Inc.  and 
Hewlett-Packard  Co.  this  week 
plan  to  announce  products 
that  reinforce  their  existing 
hardware  strategies  while 
sharpening  their  differences. 

Both  companies  will  an¬ 
nounce  new  RISC  chips,  and 
both  are  claiming  substantial 
performance  gains. 


New  f  oducts 


HEWLETT-PACKARD 

■  126-way  HP90Q0  Superdome 
server.  Pricing  begins  at  $%)9.000. 

■  Entry-level  Integrity  Server 

Pricing  below  $3,000,  with  two  low- 
voltage  Intel  Itanium  2  processors. 

SUN  MICROSYSTEMS 

■  Sun  Fire  E  Series  servers: 

Pricing  from  $50,000  to  $1  million. 

■  Opteron  systems:  One-  through 
four-way  servers  running  Linux  and 
Solaris,  certified  for  Windows.  Pricing 
was  unavailable  at  press  time. 


But  Sun  is  going  a  step  fur¬ 
ther.  In  detailing  plans  for  its 
Opteron-based  servers,  it  said 
it  will  ultimately  produce  an 
eight-way  system  based  on  the 
64-bit  processor  from  Ad¬ 
vanced  Micro  Devices  Inc.  It 
may  become  difficult  for  many 
companies  to  ignore  the  Op¬ 
teron  chip,  which  is  finding  a 
home  in  Linux  clusters  and 
impressing  users. 

One  of  those  users,  Dan 
Agronow,  vice  president  of 
technology  at  Atlanta-based 
weather  forecasting  service 
The  Weather  Channel  Interac¬ 
tive  Inc.,  is  using  Opteron 
servers  from  IBM  but  wel¬ 
comes  broader  adoption  of  the 
chip  by  hardware  vendors. 

“If  I  can  also  buy  [Opteron- 
based  systems]  from  HP  and 
Sun,  that  just  makes  it  a  more 
compelling  choice,”  said  Agro¬ 
now,  noting  that  having  more 
vendors  to  choose  from  typi¬ 
cally  drives  down  prices. 

Sun’s  RISC  chip,  the  Ultra- 
Sparc  4,  uses  chip  multithread- 
R1SC  Chips,  page  16 
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INVESTIGATIVE  REPORT 


Amex  on  the 
Defensive  About 
Oflshore  Plans 

Financial  services  Firm  may  move  up  to  70% 
of  development  work  offshore,  sources  say 


BY  LUCAS  MEARIAN 

Despite  a  denial  by  Ameri¬ 
can  Express  Co.,  sources  fa¬ 
miliar  with  the  company’s  IT 
planning  insist  that  it  has  an 
internally  stated  goal  to  shift 
a  major  portion  of  its  soft¬ 
ware  development  to  off¬ 
shore  locations. 

The  sources  said 
that  New  York-based 
Amex  plans  to  move 
as  much  as  70%  of 
development  work 


ONLINE 


To  read  more  sto¬ 
ries  on  outsourcing, 
visit  our  Web  site: 

QufckLinka2290 


offshore.  That  shift  is  an  on¬ 
going  business  objective, 
they  said. 

An  Amex  spokesman  last 
week  dismissed  the  70%  fig¬ 
ure  and  denied  that  the  fi¬ 
nancial  services  company  is 
making  any  fundamental 
shift  in  the  amount  of  devel¬ 


opment  work  it  sends  off¬ 
shore.  But  one  former  Amex 
IT  worker,  who  said  he  left 
the  company  because  he  dis¬ 
agreed  with  the  offshore  pol¬ 
icy,  hotly  disputed  that. 

“They  tell  [the  media]  one 
thing  and  tell  us  another.  I’ve 
seen  it.  I  was  there,” 
the  former  employee 
said.  “I  was  the  guy 
training  these  [off¬ 
shore-worker]  green- 
I  horns.  They’re  asking 


me  to  transfer  my  skills  to 
someone  making  $4  an  hour.” 

The  sources  were  unable 
to  say  what  portion  of  the 
company’s  development 
work  is  currently  handled 
offshore,  and  Amex  declined 
to  comment,  citing  a  policy 
Amex  Offshore,  page  53 


Weak  Dollar  May  Raise  Costs 


BY  PATRICK  THIBODEAU 
AND  THOMAS  HOFFMAN 

U.S.  companies  that  outsource 
work  to  nearshore  and  offshore 
developers  are  facing  the  pros¬ 
pect  of  higher  costs  as  a  result 
of  the  decline  in  value  of  ihe 
U.S.  dollar. 

While  intense  competition 
among  Indian  service  providers 
is  likely  to  keep  prices  for  IT  ser¬ 
vices  stable  in  the  near  term. 


U.S.  companies  can  expect  to 
eventually  see  prices  rise  as 
those  providers  try  to  offset  cur¬ 
rency  pressures  and  rising 
wages,  offshore  outsourcing 
experts  said  last  week. 

It's  a  hit  to  our  bottom  line,” 
said  Pawan  Kumar,  chairman  of 
Bangalore-based  vMoksha 
Technologies,  refernng  to  the 
declining  dollar.  But  Kumar  said 
Weak  Dollar,  page  53 
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Mr.  5,000  Desktops 
Updated  with  the 
Latest  Engineering 
App  in  10  Minutes 


. 


"We  performed  over  807,000  successful  software 
deployments  to  65,000  desktops  in  2002  alone  and 
saved  over  247,000  administration  hours." 

Steven  Bramson 

Senior  Systems  Architect,  Motorola 


Make  a  name  for  yourself  with  Windows  Server  System. 

Microsoft  Windows  Server  System  makes 
Motorola's  infrastructure  easier  to  manage.  Here's 
how:  using  Microsoft  Systems  Management  Server 
and  SQL  Server,  powered  by  Windows  Server, 
Motorola  conducts  system  inventory  of  their  65,000 
desktops  from  one  location,  identifies  necessary 
system  updates,  then  deploys  those  applications 
across  the  enterprise  automatically.  It's  software 
that  helps  you  do  more  with  less.  Get  the  full 
Motorola  story  and  a  hands-on  management  tool 
at  microsoft.com/wssystem 


Windows  Server  System"1  includes  these  products: 


Microsoft* 


Windows 
Server  System 


Server  OS 

Windows  Server"- 

Operations  Infrastructure 

Systems  Management  Server 

Application  Center 

Operations  Manager 

Internet  Security  &  Acceleration  Server 

Windows*'  Storage  Server 

Application  Infrastructure 

SQI.  Server'” 

BizTalk*  Server  "■ 

Commerce  Server 

Content  Management  Server 

Host  Integration  Server 

Exchange  Server 

Office  SharePoint  ”  Portal  Server 

Office  live  Communications  Server 


Information  Work  Infrastructure 


Faster  than  the  fastest  gun 
in  the  West  who's  holding 
fast  to  fasting  while  he  fast- 
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forwards  fast  and  furiously. 
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That  fast. 


BrightStor®  ARCserve®  Backup  Release  11 

Faster  and  easier  to  use  than  ever. 

When  it  comes  to  data  backup  and  recovery,  you  want  a  reliable,  high-performance  solution  you 
can  count  on.  That's  why  we've  created  BrightStor  ARCserve  Backup  Release  11,  featuring  the 
very  latest  in  storage  innovations.  BrightStor  ARCserve  Backup  is  faster  and  easier  than  ever, 
enhancing  both  efficiency  and  productivity.  And  with  CA's  superior  technology,  you  can  be 
confident  your  files  are  properly  backed  up  and  will  easily  be  restored  should  a  disaster  occur. 
For  more  information,  go  to  ca.com/storage/arcserve. 


Free  trial  of  BrightStor 
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ARCserve  Backup  Release  11. 
Visit  ca.com/storage/arcserve 
or  call  1-866-558-2798. 
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10  Tips  for  Offshore 
Project  Success 

OUTSOURCING:  Effective  onshore  manage¬ 
ment  is  the  key  to  getting  benefits  promised 
by  offshore  vendors,  according  to  Craig  Rin- 
toul,  a  senior  consultant  at  the  PA  Consulting 
Group.  ©  QuickLink  44488 

Xserve  Offers  Power,  Choice 
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Management  Success 
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EDS,  Navy  Try  to 
Fix  Intranet  Rollout 


Electronic  Data  Systems  Corp. 
announced  a  series  of  changes 
designed  to  “stabilize”  the 
Navy/Marine  Corps  Intranet  pro¬ 
gram  and  said  it’s  writing  off 
$559  million  worth  of  deferred 
costs  related  to  the  $6.9  billion 
contract.  EDS  has  reorganized  its 
N/MCI  account  team  and  is  work¬ 
ing  with  the  U.S.  Navy  to  improve 
coordination  and  develop  a  more 
predictable  rollout  schedule.  The 
company  said  the  N/MCI  write-off 
and  other  charges  led  to  a  fourth- 
quarter  net  loss  of  $354  million. 


Check  Point  Warns 
Of  Flaw  in  FireWall-1 

Check  Point  Software  Technolo¬ 
gies  Ltd.  confirmed  that  a  security 
flaw  in  its  firewall  software  could 
be  used  to  crash  the  product  and 
might  “allow  further  exploitation.” 
Redwood  City,  Calif.-based  Check 
Point  said  the  flaw  poses  a  threat 
only  to  customers  using  the  HTTP 
Security  Server  application  proxy 
that  comes  with  the  FireWall-1 
tool.  The  company  posted  an  up¬ 
grade  to  fix  the  problem. 


Linux  Group  Seeks 
Entry  to  Data  Center 

In  a  bid  to  accelerate  the  use  of 
Linux  in  data  centers,  Open  Source 
Development  Labs  Inc.  released  a 
document  outlining  technical  ca¬ 
pabilities  that  the  operating  system 
needs  in  order  to  run  enterprise- 
class  applications.  The  Beaverton, 
Ore.-based  consortium,  which  in¬ 
cludes  IT  vendors  and  Linux  users, 
listed  and  prioritized  more  than 
300  desired  new  features. 

Compuware  Buys 
Covisint’s  Assets 

Compuware  Corp.  said  it’s  buying 
the  assets  of  Covisint  LLC,  a 
Southfield,  Mich.-based  vendor  of 
business -to-business  tools  for  the 
automotive  industry.  Detroit- 
based  Compuware  didn't  disclose 
the  purchase  price. 
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Little  Increase  in  Fed 
IT  Spending  Proposed 


White  House  asks  for  8%  more  in  DHS 
’05  IT  budget,  l%-2%  for  other  agencies 


BY  DAN  VERTON 

WASHINGTON 

The  white  house 
last  week  released 
the  details  of  its  pro¬ 
posed  fiscal  2005 
IT  budget,  which  is  showing 
signs  of  increased  strain  amid 
a  ballooning  federal  deficit, 
the  continued  war  on  terror¬ 
ism  and  the  urgent  demands 
of  homeland  security. 

The  Bush  administration  re¬ 
quested  $59.8  billion  for  its 
governmentwide  IT  budget  in 
fiscal  2005  —  a  trivial  increase 
from  the  current  $59.1  billion 
budget,  with  homeland  securi¬ 
ty  being  the  main  growth  area. 
While  the  IT  budget  for  civil¬ 
ian  agencies  increased  by  a 
mere  1%  and  defense  just  2% 
compared  with  this  year’s,  the 
Department  of  Homeland  Se¬ 
curity’s  proposed  IT  budget 
grew  by  more  than  8%. 

Karen  Evans,  administrator 
for  e-government  and  IT  at 
the  Office  of  Management  and 
Budget  and  director  of  the  fed¬ 
eral  CIO  Council,  said  that  de¬ 
spite  the  meager  increase  out¬ 
side  of  homeland  security,  the 
IT  budget  is  a  “good-news  sto¬ 
ry”  that  shows  that  govern¬ 
ment  agencies  are  making  real 
progress  in  IT  management. 

The  whole  premise  was  to 
get  agencies  to  look  at  their  IT 
portfolios  as  a  whole  and  pri¬ 
oritize,  said  Evans,  referring  to 
the  guidance  given  to  agency 
CIOs  by  the  OMB.  Another 
key  intent  of  the  process  was 
to  force  agency  CIOs  to  plan 
for  common  IT  systems  that 
can  be  used  governmentwide. 

In  fact,  Evans  said,  agencies 
such  as  the  DHS  that  are  about 
to  move  forward  on  human  re- 

‘BIOSENSE’ PROJECT 

The  2005  federal  budget  includes  a 
$100  million  medical  early-warning  system: 
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sources  and  financial  manage¬ 
ment  contracts  must  ensure 
that  those  programs  and  con¬ 
tractors  are  flexible  enough  to 
migrate  to  a  common,  govern¬ 
mentwide  system  once  it  has 
been  selected. 

“We  don’t  want  to  stop 
something  if  they’re  on  the 
cusp  of  being  successful.  But 
we  do  want  to  make  sure  that 
it  can  marry  up  with  the  com¬ 
mon  solution,”  she  said. 

Evans  acknowl¬ 
edged  that  security 
remains  a  key  factor 
in  determining  how 
much  new  money 
agencies  will  have  to 
spend  on  IT  infra¬ 
structure  develop¬ 
ment,  modernization 
and  enhancement 
(DME).  In  addition 
to  a  cut  of  5.66%  in 
this  year’s  budget  for 


DME  projects,  agencies  are 
being  forced  to  first  demon¬ 
strate  that  they  have  the  ap¬ 
propriate  security  protections 
in  place  before  they  are  al¬ 
lowed  to  deploy  new  systems. 
And  money  for  security  im¬ 
provements  may  have  to  come 
out  of  DME  funds  at  some 
agencies,  Evans  said. 

Customs  and  border  protec¬ 
tion,  as  well  as  initiatives 
aimed  at  port,  transportation 
and  immigration  security,  re¬ 
main  driving  forces  behind  the 
DHS  IT  budget  increase. 

Of  the  $890  million  added  to 
the  budget  of  the 
Transportation  Secu¬ 
rity  Administration, 
nearly  15%,  or  $131 
million,  has  been  ear¬ 
marked  for  a  DHS- 
wide  strategy  gov¬ 
erning  access  con¬ 
trol,  real-time  valida¬ 
tion  of  identities  and 
the  determination  of 
access  privileges  at 
secure  TSA  sites. 


Pentagon  Drops  Web  Voting 
Plans  for  Military  Personnel 


BY  TODD  R.  WEISS 

The  Department  of  Defense 
has  decided,  at  least  for  now, 
to  drop  its  efforts  to  give  over¬ 
seas  U.S.  military  personnel 
voting  access  over  the  Inter¬ 
net,  because  of  concerns  about 
the  security  of  the  system. 

In  a  Jan.  30  memo  to  David 
Chu,  the  undersecretary  of 
Defense  for  personnel  and 
readiness,  Deputy  Secretary  of 
Defense  Paul  Wolfowitz  wrote 
that  “in  view  of  the  inability  to 
ensure  legitimacy  of  votes  that 
would  be  cast  in  the  SERVE 
Internet  voting  project,  there¬ 
by  bringing  into  doubt  the  in¬ 
tegrity  of  the  election,  I  here¬ 
by  direct  you  to  take  immedi¬ 
ate  steps  to  ensure  that  no  vot¬ 
ers  use  the  system  to  register 
or  vote  via  the  Internet.” 


The  memo  was  released 
Thursday  by  a  Pentagon 
spokesman  who  was  asked 
about  the  status  of  the  contro¬ 
versial  voting  program  known 
as  the  Secure  Electronic  Reg¬ 
istration  and  Voting  Experi¬ 
ment,  or  SERVE. 

Not  Dead  Yet 

Wolfowitz  wrote  in  the  memo 
that  “efforts  will  continue  to 
demonstrate  the  technical 
ability  to  cast  ballots  over  the 
Internet.”  He  added  that  he 
might  reconsider  his  decision 
“if  it  can  be  shown  that  the  in¬ 
tegrity  of  the  election  results 
can  be  assured.” 

The  Wolfowitz  memo  came 
nine  days  after  four  technolo¬ 
gy  experts  criticized  SERVE  in 
a  34-page  report  to  the  De- 
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■  Defense  Department 

■  Homeland  security 
(civilian  agencies, 
excluding  Commerce) 

Other 


SOURCE:  THE  WHITE  HOUSE 


Also  important  to  the  DHS 
is  a  significant  increase  in 
money  for  the  financial  man¬ 
agement  goals  of  the  massive 
new  agency.  The  president’s 
fiscal  2005  budget  proposal 
nearly  doubles  funding  for 
the  DHS’s  E-Merge  program 
to  $81  million.  The  goal  of 
E-Merge  is  to  integrate  and 
streamline  the  DHS’s  finan¬ 
cial  and  acquisition  man¬ 
agement  systems  across  its 
22  federal  departments. 

©  44603 


fense  Department’s  Federal 
Voting  Assistance  Program 
[QuickLink  44219]. 

One  of  the  writers  of  the  re¬ 
port,  Barbara  Simons,  a  former 
president  of  the  Association 
for  Computing  Machinery,  said 
she’s  pleased  with  the  deci¬ 
sion.  “We’re  moving  ahead  too 
quickly,”  she  said.  “It’s  possible 
in  the  foreseeable  future  that  it 
will  be  safe  to  vote  on  the  In¬ 
ternet,  but  it  may  never  be.” 

One  problem  is  that,  unlike 
with  paper  ballots  and  voting 
machines,  there’s  no  audit  trail 
for  online  votes,  so  there’s  no 
way  to  be  certain  whether 
votes  are  counted,  Simons  said. 

“Our  great  fear  is  that  there 
will  be  a  major  move  to  Inter¬ 
net  voting,  which  I  personally 
feel  is  a  threat  to  our  democra¬ 
cy.  The  bottom  line  is  we 
could  have  our  president  se¬ 
lected  by  [hackers  in]  Iran,” 
Simons  said.  “We  basically 
feel  they  are  trying  to  solve 
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Oracle  Challenges  Microsoft  in  Low-End  Database  Market 


i 


PRICING  CHANGES 


Oracle  Database  10g  Standard  Edition  One 


Per-processor  licenses 


Named-user  licenses* 


’  Five-user  minimum 


BEFORE 

NOW 

S5,995  per  CPU 

$4,995  per  CPU 

S195  per  user 

$149  per  user 

Cuts  entry-level 
price  of  lOg  to 
$4,995  per  CPU 

BY  MARC  L.  SONGINI 

Taking  aim  at  Microsoft 
Corp.’s  low-end  database  dom¬ 
inance,  Oracle  Corp.  last  week 
slashed  the  price  of  the  entry- 
level  version  of  its  lOg  soft¬ 
ware  to  slightly  undercut  the 
cost  of  Microsoft  SQL  Server. 

Oracle  said  the  list  price  of 
the  lOg  Standard  Edition  One 
release  has  been  reduced  to 
$4,995  per  processor,  a  $1,000 
drop  from  the  company’s  pre¬ 
vious  low-end  database  pric¬ 
ing.  In  comparison,  SQL  Serv¬ 
er  starts  at  $4,999  per  CPU. 

Oracle  also  cut  the  price  of 
its  named-user  license  for 
Standard  Edition  One,  which  is 
designed  for  small  businesses 
and  departmental  applications. 
In  addition,  it  doubled  the 
number  of  processors  that  the 
software  can  support  to  two. 

In  a  related  move,  Oracle 
said  it  will  throw  in  its  Real 
Application  Clusters  (RAC) 
technology  at  no  extra  charge 
for  users  of  lOg  Standard  Edi- 


an  impossible  problem.” 

Polli  Brunelli,  director  of 
the  Federal  Voting  Assistance 
Program,  wasn’t  available  for 
comment. 

While  the  military  looks 
for  a  solution  to  the  security 
problem,  online  voting  is  set 
to  take  place  this  week  for  the 
first  time  in  the  Michigan  De¬ 
mocratic  caucuses,  according 
to  Simons.  That’s  worrisome, 
she  said,  because  “this  is  a 
much,  much  harder  problem 
than  trying  to  do  commerce 
over  the  Internet.”  ©  44605 


MThe  bottom 
line  is  we 

could  have  our  pres¬ 
ident  selected  by 
[hackers  in]  Iran. 

BARBARA  SIMONS, 

FORMER  PRESIDENT.  ASSOCIATION 
FOR  COMPUTING  MACHINERY 


tion,  another  release  that  sup¬ 
ports  up  to  four  processors. 
The  lOg  databases  were  an¬ 
nounced  in  September  and  be¬ 
came  available  late  last  month. 

Oracle’s  new  pricing  “is  lev¬ 
eling  the  playing  field,  and  the 
competition  is  not  so  much 
based  on  dollars  as  features,” 
said  Kim  Floss,  a  database  ad¬ 
ministrator  and  president  of 
the  database-oriented  Interna¬ 
tional  Oracle  Users  Group  in 
Chicago.  The  ability  to  run  lOg 
Standard  Edition  One  on  two- 
processor  servers  is  also  a  big 
gain  for  users,  Floss  said. 

Seeking  Savings 

Pat  Dues,  project  officer  for 
the  city  manager’s  office  in 
Las  Vegas,  said  the  pricing 
moves  should  help  Oracle 
compete  against  both  SQL 
Server  and  IBM’s  low-end 
DB2  offerings. 


BY  LUCAS  MEARIAN 

EMC  Corp.  today  plans  to  an¬ 
nounce  upgrades  of  all  of  its 
disk  arrays  and  network-at¬ 
tached  storage  (NAS)  devices, 
as  well  as  some  of  its  key  stor¬ 
age  management  applications. 

The  rollout  includes  the 
second  generation  of  EMC’s 
high-end  Symmetrix  DMX  ar¬ 
rays,  which  debuted  last  Feb¬ 
ruary.  Raw  storage  capacity 
remains  unchanged  at  84TB, 
but  EMC  said  it  increased  the 
speed  of  the  processor  built 
into  the  arrays  to  1  GHz,  dou¬ 
bled  the  amount  of  cache 
memory  to  256GB  and  added 
15,000  rpm  Fibre  Channel  disk 
drives.  That’s  double  the 
throughput  of  the  lGbit/sec. 
drives  EMC  previously  used. 

EMC  is  also  introducing  an 
NS700  NAS  device  with  a  file 
server  head  that  can  be  re¬ 
moved  and  used  as  a  gateway 
between  servers  and  storage- 
area  networks,  in  addition  to 
upgraded  models  of  its  Clari- 
ion  midrange  arrays. 

The  new  hardware  and  soft- 


The  Las  Vegas  municipal 
government  next  year  plans  to 
upgrade  to  the  upcoming  Ver¬ 
sion  lli.l  of  Oracle’s  E-Busi- 
ness  Suite  of  business  applica¬ 
tions  and  add  new  modules, 
such  as  its  project  manage¬ 
ment  software.  Dues  said  she 
will  consider  using  the  new 
database  pricing  to  cut  costs 
as  part  of  the  upgrade  process. 

“We  think  it’s  a  very  posi¬ 
tive  announcement,”  she  said. 
“Everybody  wants  to  look  at 
ways  to  save  money.” 

Chuck  Phillips,  one  of  Ora¬ 
cle’s  two  presidents,  said  in  a 


ware  supports  EMC’s  emerg¬ 
ing  information  life-cycle 
management  (ILM)  strategy, 
which  is  designed  to  provide 
tools  that  can  automatically 
migrate  data  to  different  types 
of  storage  devices  and  manage 
it  from  creation  to  deletion. 

Ohio  Savings  Bank  recently 
installed  about  30TB  of  tiered 
storage  capacity  from  EMC  as 
part  of  an  ILM  architecture. 
CTO  Jo  Ann  Boylan  said  the 
bank  uses  Symmetrix  DMX  for 
primary  data  storage,  Clariion 
CX600  arrays  for  secondary 
storage,  Celerra  file  servers  for 
sharing  files,  and  Centera 
Compliance  Edition  devices 
for  archiving  information. 

Although  the  storage  infra¬ 
structure  isn’t  being  automati¬ 
cally  managed,  Boylan  said 
storing  data  on  different  me¬ 
dia  according  to  the  impor¬ 
tance  and  age  of  the  informa¬ 
tion  is  expected  to  save  the 
bank  millions  of  dollars.  “We’ll 
get  huge  lift  out  of  this  in  how 
we  manage  storage,”  she  said. 

Matt  Speare,  director  of  IT 


meeting  with  analysts  two 
weeks  ago  that  the  company 
planned  to  take  on  Microsoft 
aggressively  in  the  low-end 
market  [QuickLink  44394], 
The  new  pricing  was  de¬ 
signed  to  be  “extremely  com¬ 
petitive,”  said  Jacqueline 
Woods,  vice  president  of  glob¬ 
al  practices,  pricing  and  li¬ 
censing  strategy  at  Oracle,  in 
an  interview  last  week.  Woods 
said  lOg  also  comes  with  a 
simplified  management  inter¬ 
face,  and  she  noted  that  the 
RAC  technology  wasn’t  even 
available  for  the  Standard 


infrastructure  and  security, 
added  that  the  bank  now  also 
has  a  single,  enterprisewide 
view  of  its  storage  architecture. 

EMC  said  one  of  the  key 
ILM-related  upgrades  being 
announced  this  week  is  the 
addition  of  support  for  the 
Storage  Management  Interface 
Specification  to  its  manage¬ 
ment  software.  SMI-S  is  a  set 
of  common  models  and  proto¬ 
cols  designed  to  let  storage 
management  applications  con¬ 
trol  storage  devices  made  by 
different  hardware  vendors. 


More  New 
Products 

CENTERA:  EMC’s  disk  array  for 
archiving  e-mail  and  other  fixed 
data  now  includes  mainframe 
connectivity  support. 

C0NTR0LCENTER:  The  upgrad¬ 
ed  storage  management  software 
can  view  EMC's  NAS  devices  as  if 
they  were  part  of  a  SAN. 

AUTOSWAP:  It  works  in  con¬ 
junction  with  EMC’s  Symmetrix 
Remote  Data  Facility  software  to 
migrate  data  between  main¬ 
frames  and  Symmetrix  arrays 
without  disrupting  applications. 


Edition  release  before. 

Tom  Rizzo,  director  of  SQL 
Server  product  management 
at  Microsoft,  downplayed  the 
pricing  moves.  Even  if  Oracle 
lowered  the  price  of  its  data¬ 
base  to  nothing,  the  mainte¬ 
nance  and  support  costs 
would  still  outweigh  the  cost 
of  running  SQL  Server,  Rizzo 
claimed.  “What  about  report¬ 
ing,  OLAP  and  data  mining? 
That’s  all  included  in  SQL 
Server,”  he  added. 

List  prices  are  “relatively 
unimportant”  because  data¬ 
base  vendors  typically  offer 
discounts  to  users,  said  Mike 
Schiff,  an  analyst  at  Current 
Analysis  Inc.  in  Sterling,  Va. 
What  really  counts  is  the  an¬ 
nual  cost  of  maintaining  the 
software,  he  noted.  ©  44578 


MORE  NEWS  ONUNE 

Oracle  raises  its  hostile  takeover  offer  for 
PeopleSoft  to  $9.4  billion: 

QuickLink  44583 
www.computerworld.com 


EMC  is  adding  SMI-S  compli¬ 
ance  to  Symmetrix  models 
that  date  to  1997  and  to  Clari¬ 
ion  arrays  from  2000  on,  said 
Chuck  Hollis,  its  vice  presi¬ 
dent  of  platform  marketing. 

Peter  Gerr,  an  analyst  at  En¬ 
terprise  Storage  Group  in  Mil¬ 
ford,  Mass.,  said  SMI-S  sup¬ 
port  is  important  for  EMC  be¬ 
cause  some  of  its  top  storage 
rivals  have  already  announced 
compliant  products. 

Gerr  added  that  he’s  im¬ 
pressed  by  EMC’s  ability  to 
choreograph  a  complete  prod¬ 
uct  relaunch  while  it  absorbs 
three  major  software  vendors 
it  has  either  bought  or  agreed 
to  acquire  since  July. 

“Anyone  who  thought  their 
binge  of  software  acquisitions 
was  going  to  distract  them 
from  their  bread-and-butter 
business  of  selling  world-class 
storage  systems  is  wrong,”  he 
said.  “This  reinforces  the  fact 
that  they’re  still  a  storage 
company.”  ©  44597 


TEAMING  UP 

EMC  will  jointly  announce  its  new  Clariion 
arrays  with  Dell,  which  makes  and  resells 
the  midrange  devices: 

QuickLink  44600 
www.computerworld.com 


EMC  Upgrades  Symmetrix 
As  Part  of  Storage  Overhaul 
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HP  Agrees  to  Buy 
Toois  Vendors . . . 

Hewlett-Packard  Co.  is  buying 
management  toois  vendors  No- 
vadigm  Inc.  and  Consera  Soft¬ 
ware  Corp.  HP  plans  to  combine 
Novadigm’s  automated  systems- 
configuration  management  soft¬ 
ware  and  Consera’s  IT  resources 
mapping  tools  with  its  OpenView 
product  line.  It  will  pay  about 
$122  million  for  Mahwah,  N.J.- 
based  Novadigm.  Terms  of  the 
deal  with  Bellevue,  Wash.-based 
Consera  weren’t  disclosed. 


. . .  and  Renews  IT 
Deal  With  Nokia 

In  other  HP  news,  the  company 
said  it  has  tentatively  agreed  to 
renew  and  expand  an  IT  out¬ 
sourcing  contract  with  Nokia 
Corp.  that  was  signed  in  Sep¬ 
tember  2001.  The  deal  is  being 
extended  by  five  years,  to  2009. 
HP  manages  global  IT  infrastruc¬ 
ture  operations  for  Nokia,  which 
last  month  agreed  to  outsource 
its  desktop  systems  and  some  of 
its  help  desk  operations  to  IBM. 


Microsoft  Patches 
IE  Security  Raws 

Microsoft  Corp.  released  a  soft¬ 
ware  patch  to  plug  three  security 
holes  in  its  Internet  Explorer  Web 
browser.  The  company  said  it  is¬ 
sued  the  update  outside  of  its 
monthly  patch  cycle  because  of 
the  seriousness  of  the  flaws.  The 
update  includes  an  antiphishing 
change,  plus  fixes  for  vulnerabili¬ 
ties  that  could  let  attackers  run 
malicious  code  on  computers. 


Sun  Adds  Apps 
For  Solaris  on  Intel 

Sun  Microsystems  Inc.  intro¬ 
duced  a  version  of  its  StarOffice 
7  desktop  applications  suite  for 
iise  on  Intel-based  systems  run¬ 
ning  the  Solaris  operating  sys¬ 
tem.  The  company  said  it  plans 
to  release  a  full  set  of  its  Java 
Desktop  System  software  for  So¬ 
laris  x86  iater  this  year. 


MARK  HALL  ■  ON  THE  MARK 

Toyota  Scours  Hyperion 
Beta  Before . . . 


. . .  it  rolls  out  the  final  release  late  this  month.  “We’ve  been  testing  the 
[Hyperion  Performance  Suite]  beta  since  October,”  says  Mike  Burkes, 
data  technology  manager  at  Toyota  Motor  Sales  USA  Inc.  in  Torrance, 
Calif.  “We’ve  thoroughly  tested  it  for  three  or  four  thousand  hours  because 
the  business  applications  that  use  it  are  so  important.”  In  two  weeks, 
Sunnyvale,  Calif.-based  Hyperion  Solutions  Corp.  will  announce  the 


general  availability  of  Version  8.2  of  the 
business  intelligence  software  it  acquired 
with  Brio  Software  Inc.  last  fall.  The  new 
version  adds  full  support  for  Linux,  guid¬ 
ed  analysis,  dashboard  features,  Web  ser¬ 
vices  hooks  and  integration  with  unstruc¬ 
tured  data.  Burkes  appreciates  those  fea¬ 
tures  but  is  mostly  jazzed  by  the  improved 
management  and  performance,  which  are  vi¬ 
tal  for  culling  through  data  that’s  updated 
with  10  million  transactions  per  day. 
Burkes  says  that  with  8.2,  he’ll  be  able  to 
consolidate  the  software  on  fewer 
servers,  yet  still  be  able  to  handle  the 
end-of-month  spikes  in  demand.  Burkes 
also  likes  the  distrib¬ 
uted  administration 
features.  “We  don’t 
have  to  manage  user 
roles  because  business 
units  will  be  able  to  set 
them  up,”  he  says.  Al¬ 
though  only  one  execu¬ 
tive  among  the  2,700 
users  of  the  software 
within  Toyota  is  testing 
the  product’s  dash¬ 
board,  Burkes  calls  it  “a 
big  deal”  because  “any¬ 
thing  I  can  put  on  the 


Eset  LLC  in  Coronado,  Calif.,  will  an¬ 
nounce  this  week  the  availability  of 
N0D32  Remote  Administrator,  which 
lets  systems  administrators  install  or 
update  thousands  of  N0D32  antivirus 
programs  on  PCs  across  a  LAN  or 
WAN.  The  antivirus  software  can 
scan  up  to  5,800MB  of  executable 
files  per  second.  The  Remote  Admin¬ 
istrator  comes  with  five  end-user 
licenses  and  starts  at  S261. 


Web  I  can  put  in  the  dashboard.”  Even, 
he  admits,  data  from  competing  business 
intelligence  software  from  the  likes  of 
Cognos  Inc.  and  Actuate  Corp.  ■  Toyota 
honchos  may  need  to  minimize  their 
dashboards  sometime  in  the  near  future 
if  they  join  online  conferencing  sessions 
run  by  Raindance  Communications  Inc. 
Later  this  quarter,  the  Louisville,  Colo., 
conferencing  service  provider  will  unveil 
its  updated  service,  code-named  K2,  which 
will  include  interactive  video.  The  Meeting 
Edition  will  be  able  to  handle  dozens  of 
users  during  a  single  session.  K2’s  tight 
integration  with  audio  means  that  video 
will  automatically  shift 
to  the  speaker.  Or  a 
participant  can  hold 
the  video  on  a  single 
person,  either  the 
best-looking  or,  most 
likely,  the  most  senior 
attendee,  says  Todd 
Vernon,  Raindance’s 
chief  technology  offi¬ 


cer.  “Video  gives  you 
nuance,”  he  maintains. 
“So,  you’ll  know  when 
to  stop  talking  if  the 
boss  is  looking  bored.” 


Although  Vernon  acknowledges  that  the 
combination  of  video  with  voice  has  been 
slow  to  catch  on  since  AT&T  introduced 
the  notion  at  the  1964  World’s  Fair,  he 
thinks  improvements  in  the  technology 
and  the  difficulty  of  business  travel  in 
this  post-9/11  world  change  the  equation. 
“Besides,  it’s  pretty  freakin’  valuable  to  see 
someone  on  video,”  he  exclaims.  ■  It’s  likely 
you’ll  be  seeing  many  more  Web  services 
applications  this  year.  Ed  Horst,  vice 
president  of  marketing  at  AmberPoint 
Inc.  in  Oakland,  Calif.,  brags  that  his  com¬ 
pany  had  its  best  financial  period  ever  in  Q4 
of  last  year  and  he  says  the  current  fiscal 
quarter  will  beat  that.  The  Web  services 
management  company  hopes  that  the 
shipment  later  this  month  of  AmberPoint 
2004  Release  1  will  spur  even  more  sales. 
The  updated  software  is  designed  to  let 
you  monitor  Web  services  applications 
from  the  start  of  their  HTTP  traffic 
through  all  the  XML  and  SOAP  transac¬ 
tions.  It  also  adds  a  T-filter  agent,  which 
prevents  data  in  packets  from  being  altered 
and  manages  UDDI  registration.  And  the 
update  adds  IBM  WebSphere  server  sup¬ 
port  to  its  Tomcat  and  .Net  offerings. 
Pricing  starts  at  around  $50,000.  ■  “An 
e-commerce  Web  site  is  the  most  complex 
technical  system  on  the  planet,”  argues 
Steve  Kusmer,  CEO  of  Atomz  Corp.  in 
San  Bruno,  Calif.  Perhaps.  But  even  if 
you  think  they’re  a  snap  to  deploy,  you 
should  take  a  gander  at  Atomz’s  updates 
to  the  hosted  Web  commerce  operations 
the  company  sells.  The  improvements 
include  a  guided  shopping  capability 
that  speeds  buyers’  navigation  to  online 
offerings  and  a  new  content-management 
engine  that  propagates  changes  in  one 
area  of  a  Web  site  to  all  related  sections. 
And  it’s  pretty  fast,  Kusmer  boasts.  The 
search  engine  can  handle  400  searches  per 
second,  he  claims.  The  new  services  get 
turned  on  this  week.  ©  44586 


Sprint,  IBM  Combine  on  Network  Services 


BY  MATT  HAMBLEN 

Sprint  Corp.  and  IBM  last 
week  announced  a  five-year, 
multibillion-dollar  call  center 
outsourcing  deal  and  said 
they’re  also  working  together 
to  offer  Sprint’s  network  ser¬ 
vices  to  corporate  users. 

For  example,  Sprint  said  it’s 
investing  about  $100  million  to 
adopt  IBM’s  Service  Provider 
Delivery  Environment  (SPDE) 
technology  architecture,  a  set 
of  products  and  services  de¬ 
signed  to  help  IT  managers 
develop  secure  real-time  mo¬ 


bile  access  to  e-mail  systems 
and  other  corporate  applica¬ 
tions.  Sprint’s  adoption  of 
SPDE  will  let  the  telecommu¬ 
nications  carrier  provide  mo¬ 
bile  data  access  via  its  Sprint 
PCS  wireless  network  and  its 
voice  and  data  networks.  The 
biggest  market  need  is  giving 
mobile  users  secure  access  to 
sales  force  automation  appli¬ 
cations,  Sprint  President  Len 
Lauer  said  at  a  press  briefing. 

Sprint  and  IBM  have  been 
working  on  SPDE  for  several 
months  and  are  deploying 


IBM  middleware  on  a  range  of 
mobile  devices  at  early  adopter 
sites,  said  Terry  Yu,  vice  presi¬ 
dent  of  product  management 
and  development  at  Sprint. 
Prior  to  the  SPDE  collabora¬ 
tion,  the  two  companies 
worked  with  the  Air  Force 
Materiel  Command’s  logistics 
center  at  Hill  Air  Force  Base 
in  Ogden,  Utah,  to  deploy 
Pocket  PC  devices  for  wireless 
access  to  e-mail  and  calendar 
functions  [QuickLink  38340]. 

The  $100  million  investment 
in  SPDE  is  small  compared 


with  the  cost  of  Sprint’s  con¬ 
sumer  call  center  outsourcing 
deal  with  IBM.  But  the  SPDE 
plan  is  “strategically  impor¬ 
tant”  to  Sprint  in  its  battle 
with  other  carriers  for  corpo¬ 
rate  users,  said  Lisa  Pierce,  an 
analyst  at  Forrester  Research 
Inc.  “This  move  will  help 
them  get  into  the  largest  com¬ 
panies,”  she  said. 

IBM  will  manage  22  Sprint 
call  centers  and  the  IT  sys¬ 
tems  that  support  them  as  part 
of  the  agreement.  Lauer  said 
Sprint  expects  the  deal  to  low¬ 
er  its  customer  service  costs 
by  $550  million  over  the  next 
three  years.  ©  44581 


IT  CAN  IF  IT'S  DESIGNED  BY  THE  WORLD’S  NETWORKING  COMPANY.  Now  that  everything  is  on  it,  your  network  is  more  important 
than  ever.  So,  can  your  network  handle  the  demands  of  a  transformed,  interconnected  and  very  demanding  new  world?  Is  it 
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with  other  key  technology  companies  to  help  make  it  happen.  Can  your  network  overpower  every  obstacle  in  its  way  and  actually 
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IBM  Shows  Strength  in 
Numbers  at  EclipseCon 


Conference  draws  over  200  companies, 
but  IBM’s  presence  at  event  looms  large 


BY  CAROL  SLIWA 

ANAHEIM.  CALIF. 

bm  officials  said  the 
turnout  for  last  week’s  in¬ 
augural  EclipseCon  2004 
exceeded  their  expecta¬ 
tions  by  drawing  634  paid  at¬ 
tendees  from  226  companies 
and  23  countries. 

But  while  that  may  reflect 
the  broadening  in¬ 
terest  and,  in  some 
cases,  even  enthu¬ 
siasm  that  some 
developers  have 
for  the  open- 
source  Eclipse 
platform,  tools  and  plug-ins 
that  IBM  created,  there  also 
was  no  doubt  which  company 
maintained  the  heaviest  pres¬ 
ence  at  the  event. 

IBM  employees  easily  out¬ 
numbered  the  contingent  that 
any  other  company  sent  to 
EclipseCon.  The  company’s 
127  paid  attendees  represented 
20%  of  the  total.  And  there 
may  have  been  more,  since  the 
figures  reflect  only  paid  atten¬ 
dance,  a  spokeswoman  said. 

“It  just  still  shows  no  matter 
what,  especially  in  the  begin¬ 


ning,  that  IBM  is  still  going 
to  be  the  primary  driver  of 
Eclipse  as  far  as  where  it’s  go¬ 
ing,”  said  Thomas  Murphy,  an 
analyst  at  Stamford,  Conn.- 
based  Meta  Group  Inc. 

Murphy  said  he’s  interested 
to  see  how  new  board  mem¬ 
bers  influence  the  direction  of 
Eclipse  as  its  management  or¬ 
ganization  transi¬ 
tions  to  an  inde¬ 
pendent  entity  and 
how  closely  they 
will  follow  stan¬ 
dards  produced  by 
the  Java  Communi¬ 
ty  Process  (JCP)  that  Sun  Mi¬ 
crosystems  Inc.  established  to 
evolve  Java  technology. 

But  several  of  the  58  mem¬ 
bers  of  the  newly  independent 
Eclipse  management  organiza¬ 
tion  said  they  were  pleased  to 
see  IBM  relinquish  control  of 
Eclipse,  are  convinced  that 
IBM  is  committed  to  open  de¬ 
velopment  and  expect  to  play 
an  influential  role  in  setting 
Eclipse’s  direction. 

David  Mercer,  CEO  of  Scapa 
Technologies  Ltd.  in  Edin¬ 
burgh,  said  his  25-person  com¬ 


pany  has  expertise  in  testing 
and  performance  tools  and 
was  welcomed  by  IBM  and 
other  large  vendors. 

“We’re  setting  up  a  test  and 
performance  infrastructure  for 
Eclipse  upon  which  test  tools 
will  be  built,”  he  said.  “We’re 
running  this  project,  and  we’re 
a  small  company.  Quite  clearly, 
IBM  could  just  come  in,  but 
they  haven’t  done  that.” 

But  IBM  clearly  will  still  be 
a  major  force  behind  Eclipse. 
Lee  Nackman,  vice  president 
of  desktop  development  tools 
and  chief  technology  officer  of 
IBM’s  Rational  software  divi¬ 
sion,  said  the  company  has  no 
plans  to  cut  back  on  its  com¬ 
mitment  now  that  more  ven¬ 
dors  will  be  sharing  the  man¬ 
agement  load. 

“Eclipse  is  really  important 
to  IBM.  I’m  basing  my  whole 
tool  product  line  on  the 
Eclipse  technology.  This  is  not 
a  game  for  us,”  Nackman  said. 
He  noted  that  some  of  the 
IBM  attendees  at  last  week’s 
conference  were  part  of  the 
Eclipse  development  team  and 
others  are  developing  IBM 
products  that  use  Eclipse. 

Beyond  the  IBM  employees 
and  Eclipse  members,  the  gen- 


MORE  THIS  ISSUE 

Columnist  Nicholas  Petreley 
weighs  in  on  the  SWT  vs. 
Swing  debate.  Page  36 


Sun  OfficiaUjelivers  Conference  Keynote 

ANAHEIM,  CALIF. 


Sun  Microsystems  is  one  of  the 
prominent  Java  vendors  that  de¬ 
cided  not  to  participate  in  the 
newly  independent,  nonprofit 
corporation  that  rival  IBM  spun 
off  to  manage  the  open-source 
Eclipse  development  framework 
it  created. 

But  that  decision  didn’t  stop 
Sun  from  accepting  an  invitation 
lo  speak  at  the  inaugural  Eclipse¬ 
Con  hete.  Simon  Phipps,  Sun’s 
chief  technology  evangelist  and  a 
former  IBM  employee,  noted  that 
a  conversation  with  one  of  his 
former  colleagues  led  to  the 
speaking  engagement.  "I’m  here 


really  because  there’s  no  ax  to 
grind  between  Sun  and  Eclipse,” 
Phipps  told  more  than  250  con¬ 
ference  attendees. 

The  Sun  official  steered  clear 
of  controversy  during  the  main 
portion  of  his  keynote,  preferring 
to  focus  on  the  history  of  open- 
source  software  development 
and  draw  comparisons  to  the  rise 
of  craft  guilds  prior  to  the  indus¬ 
trial  revolution.  But  when  he 
opened  the  floor  to  questions,  he 
got  the  one  he  anticipated. 

Phipps  told  the  group  that  Sun 
“might  very  well”  join  Eclipse,  if 
the  conditions  that  originally 
caused  the  company  to  decline 


the  invitation  have  changed.  Sun, 
in  a  statement  issued  days  be¬ 
fore  the  EclipseCon  kickoff,  said 
the  “sticking  points”  were  busi¬ 
ness-related,  not  technical. 

Sun’s  commercial  tools  are 
based  on  its  NetBeans  open- 
source  development  environ¬ 
ment,  and  the  company,  in  its 
statement,  objected  to  what  it 
called  “the  required  mandatory 
transition  to  the  Eclipse  platform” 
that  it  claimed  it  would  have  to 
make  by  joining  the  organization. 

But  Lee  Nackman,  vice  presi¬ 
dent  of  desktop  development 
tools  at  IBM,  said  no  such  re¬ 
quirement  exists,  so  he  sees  no 


KEY  NEW  FEATURES 

Eclip: 

ALLOWS  developers  to  embed 

Swing  components  and  Abstract 
Window  Toolkit  widgets  within  a 
user  interface  built  on  Eclipse's 
Standard  Widget  Toolkit.  Swing/ 

AWT  interoperability  is  supported  on 
Windows;  Linux  work  is  ongoing. 

se3.0 

RCP  significantly  reduces  the 
amount  of  code  a  developer  needs 
to  write  to  build  the  user  interface. 

PROVIDES  new  ways  to  customize 
the  Eclipse  workbench  user  inter¬ 
face  to  show  only  the  subset  of  func¬ 
tionality  a  certain  developer  or  set  of 
developers  may  need. 

INTRODUCES  Rich  Client  Plat¬ 
form,  which  allows  developers  to 
use  a  subset  of  the  Eclipse  develop¬ 
ment  tool  platform  to  build  applica¬ 
tions  that  aren’t  integrated  develop¬ 
ment  environments,  such  as  busi¬ 
ness  applications  with  a  Windows- 
based  graphical  user  interface. 

IMPROVES  the  responsiveness  of 

the  user  interface  by  allowing  opera¬ 
tions  such  as  builds  and  searches  to 
run  asynchronously  in  the  back¬ 
ground,  so  users  don’t  have  to  wait 
for  long  operations  to  finish. 

eral  attendees  showed  keen  in¬ 
terest  in  new  features  in  the 
Eclipse  3.0  release  that’s  due 
to  be  finalized  in  June. 

One  feature  that  caught  the 
attention  of  several  confer¬ 
ence  attendees  was  the  work 
done  to  allow  Swing  compo¬ 
nents  and  Abstract  Window 
Toolkit  (AWT)  widgets  to  be 
embedded  in  an  interface  built 
on  Eclipse’s  Standard  Widget 
Toolkit  (SWT).  Swing  and 
AWT,  which  are  used  to  build 
graphical  user  interfaces,  were 
endorsed  by  the  JCP.  But  IBM 
broke  ranks  when  it  intro¬ 
duced  its  SWT  widgets.  IBM 
officials  said  Swing/AWT  in¬ 
teroperability  is  solid  now  on 
Windows,  but  there’s  still 
more  work  to  do  on  Linux. 


reason  why  Sun  won’t  join  in. 

Although  Phipps  didn't  rule  out 
the  possibility,  he  also  said  that  it 
would  be  best  for  the  Java  com¬ 
munity  if  the  newly  independent 
Eclipse  organization  joined  the 
Java  Tools  Community  that  10 
vendors  -  led  by  by  Sun,  Oracle 
Corp.  and  BEA  Systems  Inc.  - 
forged  last  month. 

“Then  all  the  vendors  that 
make  Java  tools  would  be  able 
to  get  together  and  solve  our 
shared  problems,”  he  said. 

Phipps  said  he  would  also  love 
to  see  Eclipse  explore  the  possi¬ 
bility  of  participating  in  the  JCP 
that  Sun  established  to  evolve 
Java. 

-  Carol  Sliwa 


Rich  Main,  director  of  Java 
development  environments  at 
SAS  Institute  Inc.,  said  the 
company’s  goal  is  to  port  its 
AppDev  Studio  tool  to  Eclipse. 
But  he  noted  that  SAS  has  de¬ 
veloped  a  large  set  of  Swing 
components  and  it  would  be 
too  expensive  to  reimplement 
them  on  SWT. 

John  Repko,  a  computer  en¬ 
gineer  at  the  Naval  Undersea 
Warfare  Center  in  Newport, 
R.I.,  said  he  needs  to  make 
sure  that  commercially  avail¬ 
able  Swing-based  map  appli¬ 
cations  will  run  in  an  Eclipse 
application.  “Not  having  to 
write  that  ourselves  is  impor¬ 
tant,”  he  said. 

Another  new  feature  in 
Eclipse  3.0  that  developers 
flocked  to  hear  about  in  pre¬ 
sentations  was  the  Rich  Client 
Platform,  which  will  signifi¬ 
cantly  reduce  the  amount  of 
code  needed  to  write  graphi¬ 
cal  user  interfaces.  The 
Eclipse  RCP  effort  is  intended 
to  enable  developers  to  build  a 
wide  range  of  business  appli¬ 
cations  —  not  just  integrated 
development  environments. 

A  developer  at  a  defense 
contractor  who  asked  not  to 
be  identified  said  that  his 
company  doesn’t  currently  use 
Eclipse  and  that  the  technolo¬ 
gy’s  security  isn’t  as  mature  as 
he  had  hoped  it  would  be.  He 
said  he  is  also  concerned 
about  the  learning  curve  but 
expects  to  recommend  Eclipse 
to  his  company  “because  any 
other  way  we’d  go,  we’ve  have 
to  start  from  scratch.”  ©  44611 
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Great  Moments  at  Work. 

4:42  pm  You're  not  stopped  in  the 
hall  and  asked  to  pull  yet  another 
up-to-the-second  project  report. 
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Microsoft  More  than  what  it  used  to  be,  Microsoft  Office  is  now  an 

Office  System  integrated  system  of  programs,  servers,  services,  and  solutions. 


Programs 

Access  2003 
Excel  2003 
FrontPage®  2003 
InfoPath™  2003 
OneNote™  2003 
Outlook*  2003 


PowerPoint®  2003 
Project  2003 
Publisher  2003 
Visio*  2003 
Word  2003 


Servers 


Project  Server  2003 

live  Communications 
Server  2003 

Exchange 
Server  2003 

SharePoint™  Portal 
Server  2003 


Services 

live  Meeting 
Office  Online 

Solutions 

Solution  Accelerators 


Enabling  Technologies: 

Windows  Server™  2003,  Windows*  SharePoint  Services, 
Rights  Management  Services 


the  new  Microsoft  Office  System. 


n  do  more  for  themselves  so  you  can 
important  things.  That's  because  with 
soft®  Office  Project  Server  and  Project 
essional  2003,  users  have  visibility  into  all  of  their 


projects,  including  integrated  costs  from  business 


ystems,  risks,  and  project  documents— all  on  their 
wn.  Hallway  chitchat  will  never  be  the  same. 

For  more  information,  go  to  microsoft.com/officelT 
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Novell  Names  SUSE 
CEO  to  Europe  Job 

Novell  Inc.  appointed  Richard 
Seibt,  head  of  its  recently  ac¬ 
quired  SUSE  Linux  business  unit, 
to  take  over  as  president  of  the 
software  vendor’s  European  oper¬ 
ations.  Seibt,  who  was  CEO  of 
SUSE  Linux  AG  prior  to  its  acqui¬ 
sition  by  Novell,  will  be  responsi¬ 
ble  for  all  day-to-day  operations 
in  Europe.  He  replaces  Gerard 
Van  Kemmel,  who  was  named 
chairman  of  European  operations. 


Federal  Agencies 
Appoint  New  CIOs 

Two  federal  agencies  named  new 
CIOs.  The  Department  of  Veterans 
Affairs  tapped  Robert  McFarland, 
formerly  head  of  government  re¬ 
lations  at  Dell  Inc.,  to  be  its  assis¬ 
tant  secretary  for  IT  and  CIO.  And 
the  Export-Import  Bank  of  the 
U.S.  said  Fernanda  Young  will 
take  over  as  its  CIO  today.  She 
held  a  similar  job  at  the  Federal 
Energy  Regulatory  Commission. 


Cisco  Reports  15% 
Revenue  Gain . . . 

Cisco  Systems  Inc.  reported  a 
15%  year-over-year  increase  in 
revenue  for  its  second  quarter, 
which  ended  Jan.  24.  Profits  fell 
27%  but  would  have  risen  if  not 
for  a  $567  million  charge.  Cisco 
said  component  supply  problems 
that  hurt  shipments  early  in  the 
quarter  have  largely  been  fixed. 


BY  THE  NUMBERS 

REVENUE  HI  PROFIT  J 

Q2FY04 

S5.4B 

S724M 

Q2FY03 

ESI 

S991M 

. . .  And  Warns  of 
Software  Flaw 

Cisco  also  issued  an  advisory 
about  a  software  vulnerability 
that  affects  some  configurations 
of  its  7600  series  routers  and  its 
Catalyst  6000  and  6500  switch¬ 
es.  The  flaw  could  be  used  to 
freeze  the  devices  or  for  denial- 
of-service  attacks,  said  Cisco, 
which  posted  upgrades  to  fix  it. 


Extreme  Switch  Boosts 
Power  at  Network  Edges 


Device  includes  Gigabit  Ethernet  ports 
and  support  for  lOGbit/sec.  connections 


BY  MATT  HAMBLEN 

XTREME  NETWORKS 
Inc.  last  week  an¬ 
nounced  a  switch  for 
use  in  wiring  closets 
at  network  edges.  It’s  the  first 
device  of  its  kind  to  provide 
two  10  Gigabit  Ethernet  up¬ 
links  to  core  networks,  accord¬ 
ing  to  analysts. 

In  addition  to  the  optional 
10  Gigabit  Ethernet  connec¬ 
tions,  the  Summit  400-48 
switch  includes  48  ports  that 
each  support  up  to  Gigabit 
Ethernet  transmission  rates  to 
desktop  PCs  and  servers,  said 
Varun  Nagaraj,  vice  president 
of  product  management  at  Ex¬ 
treme  in  Santa  Clara,  Calif. 

Installing  the  switches  will 
help  companies  “eliminate  up¬ 
grade  cycles”  as  IT  managers 


look  to  push  data  to  desktops 
at  faster  speeds,  Nagaraj  said. 

The  number  of  companies 
that  need  Gigabit  Ethernet 
connections  to  the  desktop  is 
limited  now  but  is  growing 
among  power  users  and  IT 
shops  that  want  to  connect 
systems  in  server  farms,  said 
IDC  analyst  Abner  Germanow. 
He  added  that  Extreme  is  the 
first  vendor  he  knows  of  to  of¬ 
fer  an  edge  switch  with  dual 
10  Gigabit  Ethernet  ports. 

Daniel  Morreale,  CIO  at 
North  Bronx  Healthcare  Net¬ 
work  (NBHN)  in  New  York, 
said  he  plans  during  the  next 
five  months  to  install  up  to  20 
Summit  400-48  devices,  fol¬ 
lowing  a  successful  two-week 
test  of  two  switches  —  one 
within  the  IT  department  and 


NEW  HARDWARE 

Summit  400-48 

Includes  48  Ethernet  ports 
with  10/100/1,000  Base-T 
transmission  capabilities, 
plus  two  optional  ports  for 
10  Gigabit  Ethernet  links  to 
core  networks 

Provides  peak  through  of 
101  million  packets  per  second 
and  features  a  160Gbit/sec. 
switching  fabric 

Starts  at  $9,995, 
plus  $7,995  for  the  10  Gigabit 
Ethernet  module 


another  that  supported  a  pa¬ 
tient-care  unit. 

“They’re  working  wonder¬ 
fully,  being  used  for  intense 
bandwidth  needs  such  as  ob¬ 
stetrics  and  cardiac  imaging,” 
he  said,  adding  that  the  use  of 
the  switches  “has  been  trans¬ 


parent”  to  IT  managers  as  well 
as  end  users. 

Morreale  started  installing 
nearly  150  Extreme  switches 
and  routers  in  September  to 
replace  7-year-old  gear  from 
Cisco  Systems  Inc.  The 
changeover  came  after  NBHN 
decided  to  upgrade  its  net¬ 
work  to  support  a  10  Gigabit 
Ethernet  core.  “I  started  doing 
pricing  on  the  upgrade,  and  it 
came  down  to  Cisco  and  Ex¬ 
treme,  but  Extreme  was  signif¬ 
icantly  lower  in  cost,”  Mor¬ 
reale  said,  though  he  declined 
to  disclose  specifics. 

The  research  group  at  the 
University  of  Pittsburgh’s 
School  of  Information  Sci¬ 
ences  in  Oakland,  Pa.,  is  also 
testing  a  Summit  400-48.  The 
device  is  installed  in  a  re¬ 
search  network  over  which 
entire  file  systems  are  trans¬ 
ferred,  said  Mark  Steggert,  the 
school’s  systems  manager. 

“Our  research  users  have 
never  encountered  a  network 
fast  enough  for  them,”  Steggert 
said  jokingly,  adding  that  the 
new  switch  should  help  meet 
performance  demands  at  a 
cost-effective  price.  ©  44573 


Mobile  Software  Gets 
Pocket  PC  Support 


BY  BOB  BREWIN 

Good  Technology  Inc.  last 
week  announced  a  version  of 
its  messaging  and  remote  data 
access  software  that  supports 
handheld  devices  running  Mi¬ 
crosoft  Corp.’s  Pocket  PC  op¬ 
erating  systems,  as  well  as 
hardware  from  palmOne  Inc. 
and  Research  In  Motion  Ltd. 

Release  3.0  of  the  GoodLink 
software  also  supports  the  Ad¬ 
vanced  Encryption  Standard 
(AES)  and  will  be  bundled 
into  Good  Technology’s  own 
line  of  handheld  computers, 
said  Susan  Forbes,  vice  presi¬ 
dent  of  product  marketing  at 
the  Sunnyvale,  Calif.-based 
company. 

Earlier  GoodLink  versions 
primarily  supported  delivery 
of  corporate  e-mail  to  wireless 
devices.  But  GoodLink  3.0  can 
work  with  the  Pocket  PC  ver¬ 


sions  of  Microsoft’s  Office  ap¬ 
plications,  Forbes  said.  The 
combination  will  provide  “a 
laptop  experience”  to  users  of 
Pocket  PC-based  handhelds 
and  smart  phones,  she  added. 

By  midyear,  GoodLink  3.0 
will  also  support 
what  Forbes 
called  “zero- 
touch”  provision¬ 
ing  of  Microsoft 
applications  for 
mobile  users. 

That  feature  will 
let  IT  managers 
push  applications 
to  end  users  over 
wireless  networks, 
eliminating  the 
need  to  physically 
load  the  software 
at  a  central  loca¬ 
tion,  she  said. 

In  addition  to  the 


product  rollout,  Good  Tech¬ 
nology  announced  that  it  has 
signed  on  three  new  users,  in¬ 
cluding  UnumProvident  Corp. 
in  Chattanooga,  Tenn.  Unum¬ 
Provident,  the  largest  disabili¬ 
ty  insurer  in  the  U.S.,  plans 
to  roll  out  GoodLink  3.0  and 
about  300  of  Good  Technolo¬ 
gy’s  G100  handhelds  to  its 
sales  force  and  senior  execu¬ 
tives  over  the  next  12  months. 
Brent  Rogers,  senior  vice 
president  of  IT  at  Unum- 
'0  Provident,  said  his  staff 
GoodLink  found  GoodLink  rela¬ 
tively  easy  to  install 
and  support  as  part  of 
a  test  deployment. 

“It’s  very  simple 
from  a  support  point 
of  view,”  he  said,  not¬ 
ing  that  the  installa¬ 
tion  required  only 
the  addition  of  an 
Intel-based  system 
that  runs  Good- 
Link’s  server  soft¬ 
ware  component 
and  handles  traffic 
between  the  mobile 


- 


devices  and  UnumProvident’s 
Outlook  e-mail  server. 

Although  UnumProvident  is 
initially  using  GoodLink  only 
for  e-mail,  Rogers  said  the 
company  plans  to  broaden  its 
use  of  the  technology.  He 
added  that  he  thinks  Good- 
Link  provides  more  capabili¬ 
ties  and  adaptability  than  rival 
products,  such  as  Research  In 
Motion’s  BlackBerry  family. 

Other  new  features  in 
GoodLink  3.0  include  support 
for  viewing  attachments  such 
as  Adobe  Acrobat  files  or  Mi¬ 
crosoft  Excel  spreadsheets 
on  handheld  devices,  plus  an 
e-mail  in-box  that’s  much  like 
those  found  on  laptop-based 
messaging  systems. 

Incorporating  support  for 
AES  into  the  software  should 
meet  the  demands  of  hand¬ 
held  users  for  stronger  data- 
encryption  capabilities,  said 
Craig  Mathias,  an  analyst  at 
Farpoint  Group  in  Ashland, 
Mass.  “AES  is  very  secure,  and 
in  the  future,  it’s  going  to  be 
essential,”  he  said.  ©  44606 


The  solution?  Three  sets  of  clustered  servers  to  deliver  faster  response 
by  removing  bottlenecks  and  balancing  unpredictable  processing  loads, 
while  providing  high  system  uptime. 


Gateway®  975  Series 

2U,  High-Availability  Server 

•  Dual  Intel®  Xeon™  processor  capable 

•  Up  to  12GB  PC2I00  ECC  SDRAM 

•  Six  64-bit  PCI-X  Slots 

•  3-Yr.  Parts/Labor  Limited  Warranty/ 
3-Yr.  Next  Business  Day  On-Site1 

•  FCC  Class  A  Compliant2 


$2,199.00 


Gateway®  840  Serial-ATA 
RAID  Enclosure 

2U  Rack  optimized  Storage  Chassis 

•  Scales  up  to  2TB  for  under  $6,000 
or  3TB  for  under  $7,200 

•  Hot-swappable  SATA  7200  RPM  Hard  Drives 

•  Integrated  SATA  RAID  Controller 

•  3-Yr.  Parts/Labor  Limited  Warranty/ 

3-Yr.  Next  Business  Day  On-Site1 


$3,999.00 


Gateway  Technology 
Lifecycle  Services 

Gateway  can  support  your  technology 
needs,  no  matter  where  your  3gency  is 
in  the  technology  lifecycle. 

Award-Winning  Gateway 
Customer^Centric  Support 

Gateway  has  teamed  with  1BM“’  Global 
Services  to  provide  phone  and  next 
business  day,  4-hour,  and  2-hour 
on-site  support. 1 


Jesse  Castillo,  Network  Support  Manager 
California  Department  of  Insurance 


Gateway  listened  to  the  problems  facing  the  California  Department  of 
insurance. Their  14.000  employees  said  e-mail  was  fast  becoming  the 
most  vital  communication  method  for  agents,  companies,  and  the 
public.  However,  their  e-mail  system  was  outdated. 


To  find  out  why  our  server  and  storage  technology 
is  a  better  business  policy,  call  your  Gateway 


We’re  listening. 


Now  they  have  an  e-mail  system  that  delivers  increased  productivity 
and  reliability  with  only  9  servers — instead  of  14. 


“We  standardized  on  Gateway  because  in  the 
end,  it  all  comes  down  to  support  and  cost. 
With  Gateway  we  get  the  best  of  both.” 


Gateway®  servers  are  the 

B  *•<  'V  - 


*■  ■  ‘  *- ' 
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no-risk  policy  for  the 
California  Department 


of  Insurance. 


.  r i  ■  •  o  change  wuhoiit  notice  oi  obligation  inci'  may  no*  be  available  through  alt  sales  channels  Puces  exclude'  shipping  and  handling . 

sibie  hi  typographical  enors  Limned  warranties:  and  service  agreements  apply;  visit  gateway.com  or  call 

l  -8(30-846^2000:  fOt  a  free'  copy..  May  not,  be  available  in  all  States.  -FCC  Class  A,  Emission  Standard,  Copyright  ©Mof  Gateway,  Inc.  All  lights 
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Users  Tout  Advantages  of 
PLM  Despite  Difficulties 


Faster  time  to  market,  lower  costs  cited 


BY  JAIKUMAR  VIJAYAN 

ORLANDO 

espite  the  chal¬ 
lenges,  implement¬ 
ing  a  product  life- 
cycle  management 
capability  can  give  manufac¬ 
turing  companies  a  competi¬ 
tive  edge  in  a  recovering  econ¬ 
omy,  said  users  at  a  confer¬ 
ence  organized  here  last  week 
by  PLM  software  vendor  Ma- 
trixOne  Inc. 

The  benefits  include  faster 
time  to  market,  lower  costs 
and  more  component  and 


technology  reuse,  they  said. 

But  the  complex  integration 
and  customization  issues  that 
have  long  scared  users  off 
large  PLM  deployments  con¬ 
tinue  to  be  substantial  obsta¬ 
cles,  they  added. 

“PLM  is  all  about  revenue 
growth,”  said  Glen  Waisner, 
president  of  The  Hayes  Co.,  a 
manufacturer  of  lawn  and  gar¬ 
den  equipment  in  Valley  Cen¬ 
ter,  Kan. 

The  company,  whose  clients 
include  big-name  retailers 
such  as  Wal-Mart  Stores  Inc. 


and  Target  Corp.,  re¬ 
cently  implemented 
a  PLM  capability  in 
a  bid  to  gain  better 
control  over  a  cha¬ 
otic  product-devel¬ 
opment  process. 

PLM  has  led  to 
much  better  visibili¬ 
ty  into  Hayes’  prod¬ 
uct-development 
process  and  has  en¬ 
abled  product  col¬ 
laboration  across 
multiple  departments  and 
with  its  major  suppliers,  some 
of  which  are  based  overseas, 
said  Waisner.  As  a  result, 


Hayes  this  year  will 
manufacture  1,800 
distinct  products, 
compared  with  500 
last  year.  Some  of 
those  will  be  cus¬ 
tom-made  for  indi¬ 
vidual  clients. 

For  Invensys  Rail 
Systems,  implement¬ 
ing  PLM  has  been 
about  “efficiency  im¬ 
provement,”  said 
Ceri  Gosling,  CIO  of 
the  Wiltshire,  U.K.-based 
manufacturer  of  rail  automa¬ 
tion  and  signaling  systems.  Al¬ 
lowing  designers,  engineers, 


The  Hayes  Co.’s 
GLEN  WAISNER 

says,  “PLM  is  all 
about  revenue 
growth.” 


Mydoom  Lesson:  Take  Proactive 
Steps  to  Prevent  DDoS  Attacks 


But  putting  up  an 
adequate  defense 
can  be  expensive 


BY  JAIKUMAR  VIJAYAN 

Dealing  with  a  distributed  de- 
nial-of-service  attack  such  as 
the  one  that  took  down  The 
SCO  Group  Inc.’s  Web  site  last 
week  continues  to  be  a  major 
challenge  for  companies,  secu¬ 
rity  experts  said. 

But  several  options  are 
available  to  at  least  help  allevi¬ 
ate  the  pain  for  those  that  be¬ 
come  targets,  they  added. 

A  DDoS  attack  typically  in¬ 
volves  thousands  of  compro¬ 
mised  “zombie”  systems  send¬ 
ing  torrents  of  useless  data,  or 
requests  for  data,  to  targeted 
servers  or  networks. 

The  SCO  attack,  for  in¬ 
stance,  was  launched  using 
systems  that  had  previously 
been  infected  by  the  Mydoom 
virus  [QuickLink  44483],  The 
virus  contained  code  that  in¬ 
structed  thousands  of  infected 
computers  to  access  SCO’s 
Web  site  at  the  same  time,  ren¬ 


dering  it  inaccessible  to  legiti¬ 
mate  users. 

Stopping  the  flood  of  traffic 
can  be  very  difficult  because 
it’s  coming  from  so  many 
sources,  said  Bruce  Schneier, 
president  of  Counterpane  In¬ 
ternet  Security  Inc.  in  Moun¬ 
tain  View,  Calif. 

“From  a  philosophical  per¬ 
spective,  if  the  attacker’s  pipe 
is  bigger  than  the  defender’s 
pipe,  the  attacker  can  always 
knock  out  the  defender,”  said 
Schneier. 

There  are  several  approach- 


TIPS 


Dealing 
With  DDoS 

■  Have  extra  network  band¬ 
width  and  server  headroom  to 
handle  sudden  traffic  spikes. 

®  Have  multiple,  geographically 
dispersed  servers  for  handling 
the  load. 

■  Contractually  require  service 
providers  to  offer  DDoS  mitiga¬ 
tion  guarantees. 


es  companies  can  take  to  pre¬ 
pare  for  attacks  such  as  this, 
said  Paul  Mockapetris,  inven¬ 
tor  of  the  Internet’s  core  Do¬ 
main  Name  System  and  chair¬ 
man  of  IP  address  manage¬ 
ment  vendor  Nominum  Inc.  in 
Redwood  City,  Calif. 

One  is  to  set  aside  extra  net¬ 
work  bandwidth  and  server 
processing  capacity  to  with¬ 
stand  sudden  surges  in  traffic, 
he  said.  Another  is  to  “retreat 
from  your  domain  name”  and 
essentially  park  your  Web  site 
at  another  address  while  the 
attack  plays  out,  he  said. 

Geographically  distributing 
Web  servers  is  another  ap¬ 
proach  worth  considering, 
Schneier  said.  That  way,  even 
if  one  server  or  network  seg¬ 
ment  is  taken  down  by  an  at¬ 
tack,  normal  traffic  can  be 
redirected  to  other  servers. 

But  putting  in  place  extra 
server  processing  capacity  to 
handle  DDoS  attacks  can  be 
expensive  and  is  likely  to 
make  sense  only  for  larger 
companies,  Mockapetris  said. 
“There’s  a  bit  of  a  digital  di¬ 
vide  when  it  comes  to  the  abil¬ 


ity  of  companies  to  defend 
themselves  against  these  at¬ 
tacks,”  he  said. 

“The  long-term  answer  to 
DDoS  protection  has  to  be  in 
the  [service  provider]  net¬ 
works  and  backbones,”  said 
John  Pescatore,  an  analyst  at 
Stamford,  Conn.-based  Gart¬ 
ner  Inc.  That’s  because  up¬ 
stream  service  providers  are 
in  a  better  position  to  detect 
and  choke  off  traffic  directed 
at  a  specific  IP  address,  said 
Schneier. 

As  a  result,  it’s  a  good  idea 
to  require  service  providers  to 
offer  some  sort  of  guarantee 
against  DDoS  attacks,  said 
Schneier.  Gartner  has  in  fact 
been  advocating  this  for  more 
than  two  years,  urging  users  to 
include  DDoS  protection  lan¬ 
guage  in  their  service-level 
agreements  with  Internet  ser¬ 
vice  providers  and  data  center 
hosting  companies. 

But  less  than  1%  of  compa¬ 
nies  overall  are  buying  such 
services,  Pescatore  said.  “Most 
enterprises  say,  ‘It  isn’t  raining, 
so  the  roof  isn’t  leaking.  Why 
fix  it?’  ”  he  said.  ©  44596 


MORE  ONLINE 

For  additional  stories  on  this  topic,  visit  our 
Security  Knowledge  Center. 

QuickLink  k1600 
www.computerworld.com 


www.computerworld.com 


and  procurement  and  market¬ 
ing  teams  to  work  collabora- 
tively  on  product  develop¬ 
ment  has  led  to  better  pur¬ 
chasing  decisions,  lowered 
product-recall  costs  and  en¬ 
abled  better  workflow  be¬ 
tween  commercial  and  techni¬ 
cal  teams.  Gosling  said. 

GE  Consumer  &  Industrial 
in  Plainville,  Conn.,  has  ex¬ 
tended  PLM  beyond  physical 
products  and  is  using  the  con¬ 
cept  to  manage  commercial 
documents  such  as  invoices 
and  purchase  orders,  as  well 
as  tax-filing  systems,  said  CIO 
Stuart  Scott.  The  company 
has  put  in  place  a  massive  col¬ 
laborative  environment  called 
My  Workplace  that’s  aimed  at 
improving  product  develop¬ 
ment  efficiencies.  It  has  also 
begun  extending  PLM  to  han¬ 
dle  over  17  million  commercial 
documents,  Scott  said. 

“PLM  can  help  companies 
decide  what  products  to  invest 
in  and  what  to  drop,”  said 
Marc  Halpern,  an  analyst  at 
Stamford,  Conn.-based  Gart¬ 
ner  Inc.  “It  helps  them  allocate 
the  right  budget  for  product 
development,  track  schedules 
and  analyze  [product]  perfor¬ 
mance  in  terms  of  revenue 
generation  or  quality.” 

But  getting  there  is  no  easy 
feat.  “Integration  is  key  to 
PLM,”  said  Mark  O’Connell, 
president  and  CEO  of  West- 
ford,  Mass.-based  MatrixOne. 
“Very  little  information  is  cre¬ 
ated  in  a  PLM  system.  Instead, 
the  attempt  is  to  add  value  to 
the  information  [that  already 
exists].”  Doing  this  means  ty¬ 
ing  together  applications  as 
disparate  as  engineering  and 
design,  ERP,  CRM  and  supply 
chain  systems,  he  said. 

Often,  because  product  de¬ 
velopment  processes  can  vary 
widely,  either  PLM  products 
have  to  be  heavily  customized 
to  fit  specific  environments, 
or  business  processes  have  to 
be  tweaked  to  accommodate 
the  PLM  capability.  The  quali¬ 
ty  of  product-related  data  that 
a  company  maintains  is  also 
key  to  getting  real  benefits, 
users  said. 

“A  lot  of  companies  don’t 
understand  PLM,”  Halpern 
said.  “PLM  is  almost  like  ERP 
was  15  years  ago.”  ©  44602 
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Double  your  productivity  with  Scan2  technology. 


JWhn  The  best  way  to  stay  ahead  is  to  double 
your  productivity.  Introducing  Scan2 
SCan2  technology  from  Sharp.  Sharp's  Digital 
Imagers  with  Scan2  technology  are  designed  to  scan  two- 
sided  documents  in  a  single  pass. 

Now  your  training  manuals  and  white  papers  can  be 
scanned,  copied,  emailed  and  digitally  distributed  quicker 
than  ever  before. 


In  fact,  it's  1 1 5%  faster  than  any  other  product  in  its  class. 
Not  only  is  it  like  having  double  the  help,  it  will  also  allow 
you  to  accomplish  more  tasks,  in  dramatically  less  time. 
Together  with  Sharp's  integrated  network  management 
software  and  security  features,  your  digital  information  is 
safe  and  workflow  is  fully  optimized. 

Visit  sharpusa.com/scan2  or  call  1-800-BE-SHARP  for 
more  information. 


The  AR-M550,  AR-M620  and  AR-M700: 

•  Operate  at  55, 62  and  70  pages-per-minute 

•  Fully  integrated  network  ready  digital  copier/printers 

•  Include  network  management  software  and  document  filing  capability 

.  be  sharp 


•  Results  of  Buyers  Laboratory  Inc.  Document  Feeding  Speed  tests  (originals  per  minute)  in  2:2  mode  for  Sharp  AR-M550  vs.  the  following  manufacturers'  competitive  models:  Canon  iR  5000  and  5020.  HP  9055  MFP.  Konica  7155,  Kyocera  M.ta  KM-5530.  Ricoh  Aficio  1055  aixJ  551  and 

Toshiba  e -STUDIO  550.  ©2003  Sharp  Corporation 
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RISC  Chips 

ing  technology  to  boost 
throughput  and  application 
performance  at  a  lower  price, 
according  to  Sun  officials. 

UltraSparc  3  users  will  be 
able  to  upgrade  without  swap¬ 
ping  boxes.  The  UltraSparc  4 
is  “essentially  doubling  the 
performance  in  place,”  said 
Clark  Masters,  executive  vice 
president  for  enterprise  sys¬ 
tems  at  Sun. 

HP,  meanwhile,  will  release 
the  PA  8800,  its  newest  PA- 
RISC  chip,  which  is  the  basis 
of  its  HP9000  server  line.  The 
company  claims  that  the  chip 
will  deliver  a  50%  perfor¬ 
mance  increase  over  the  PA 
8700  if  the  servers  are  running 
the  same  number  of  proces¬ 
sors,  but  it  will  yield  a  250% 
performance  boost  when  up¬ 
grading  an  existing  server  to 
double  capacity.  The  PA  8800 
is  a  dual-core  chip,  which 
means  that  what  is  now  a  four¬ 
way  processor  could  become 
an  eight-way  if  PA  8800 
processors  are  plugged  in. 

Unlike  Sun,  HP  plans  to 
phase  out  its  RISC  chips  even¬ 
tually,  migrating  users  to  the 
64-bit  Itanium  processor  it  co¬ 


developed  with  Intel  Corp. 

But  HP  is  “continuing  to  make 
some  level  of  investment  in  a 
couple  of  more  generations  of 
PA  processor  to  essentially  ad¬ 
dress  the  needs  of  their  in¬ 
stalled  base,”  said  Gordon 
Haff,  an  analyst  at  Illuminata 
Inc.  in  Nashua,  N.H.  To  do 
otherwise,  he  said,  would  risk 
user  defections. 

Depends  on  the  App 

Rich  Partridge,  an  analyst  at 
D.H.  Brown  Associates  Inc.  in 
Port  Chester,  N.Y.,  said  both 
HP  and  Sun  have  developed 
valid  ways  of  boosting  system 
performance.  For  users,  “the 
application  might  well  deter¬ 
mine  which  approach  gives 
the  most  efficient  use  of  the 
hardware,”  he  said. 

Opteron  is  another  issue. 
There  have  been  rumors, 
some  springing  from  competi¬ 
tors  and  others  from  pub¬ 
lished  reports,  that  HP  is  on 
the  verge  of  announcing 
servers  based  on  Opteron, 
which  has  the  capability  of 
running  both  32-  and  64-bit 
applications.  Stamford,  Conn.- 
based  Gartner  Inc.  last  week 
published  a  report  analyzing 
the  implications  of  HP  adopt¬ 
ing  the  Opteron.  HP  isn’t  con¬ 
firming  or  denying  such  plans. 


Intel  has  also  signaled  inter¬ 
est  in  developing  a  64-bit  ex¬ 
tension  for  its  x86  line,  which 
uses  an  instruction  set  that’s 
different  from  that  used  by 
Itanium.  The  company  may 
detail  those  plans  at  its  devel¬ 
oper  conference  next  week. 

Interest  in  Opteron  is  clear¬ 
ly  growing.  IBM  started  sell¬ 
ing  systems  based  on  the  chip 
last  year,  focusing  on  high- 
performance  technical  com¬ 
puting  users.  But  without 
much  fanfare,  the  company 
has  also  been  selling  it  to  a 
broader  base,  although  the 
company  says  those  users 
remain  compute-intensive. 

Agronow  said  Opteron  has 
allowed  him  to  boost  perfor¬ 
mance  of  his  Oracle  Corp. 
applications  without  increas¬ 
ing  licensing  costs,  which 
are  pegged  to  performance. 
The  key  was  getting  the  best 
performance  at  the  lowest 
gigahertz  rate:  He  found 
through  testing  that  the  1.4- 
GHz  Opteron  offered  perfor¬ 
mance  equivalent  to  a  2.8-GHz 
Intel  Xeon  chip. 

Agronow  advised  potential 
users  to  test  Opteron.  “That’s 
what  nailed  it  on  the  head  for 
me,”  he  said.  “I  didn’t  have  to 
accept  somebody’s  study  or 
test  case.”  ©  44608 


Consolidation  Goal  Is  to  Cut  Costs 


After  Vanguard  Car  Rental  USA 
Inc.  acquired  the  Alamo  and 
National  car-rental  brands  in 
October,  it  embarked  on  a  plan 
to  cut  IT  costs  from  $145  mil¬ 
lion  to  $75  million  or  less 
through  systems  consolidation. 

CIO  Tyler  Best’s  job  is  to 
make  it  happen  by  July  15. 

Alamo  Rent  A  Car  Inc.  and 
National  Car  Rental  were  previ¬ 
ously  owned  by  ANC  Rental 
Corp.,  but  they  used  separate  IT 
systems:  an  IBM  mainframe  at 
Alamo,  and  HP  ProLiant  Intel- 
based  servers  at  National. 

Tulsa,  0kla.-based  Vanguard 
wants  to  maintain  separate 
brand  identities  while  creating 
an  IT  infrastructure  with  just 
one  system  to  manage  vehicle 
assets,  reservations  and  other 
back-end  systems.  The  compa¬ 
ny  currently  lacks  a  single  view 
of  its  assets.  Best  said. 

“The  rental  car  business  is 
what  I  call  ‘glorified  asset  man¬ 
agement’  -  making  sure  vehi¬ 
cles  are  in  the  right  place  at  the 
right  time,”  he  said. 

Vanguard  is  moving  its  sys¬ 
tems  to  two  high-end  PA-RISC- 
based  Superdome  servers  from 


HP.  Best  said  his  technical  staff 
has  no  problem  with  HP’s  strat¬ 
egy  to  phase  out  the  PA-RISC 
:  line  and  migrate  those  users 
:  to  Itanium. 

Vanguard  evaluated  tech¬ 
nologies  from  the  major  ven¬ 
dors,  each  of  which  Best  said 
:  he  feels  has  the  capability  to 
produce  systems  that  can 
leapfrog  the  others  at  different 
points  in  time.  Best  said  that 
when  his  company  took  a 
“snapshot"  of  what  was  avail¬ 
able,  he  decided  on  Super- 
dome  because  he  felt  it  would 
provide  the  transaction  power 
he  needed,  maintain  standards 
compliance  and  be  backed  up 
l  with  good  service. 

Vanguard  is  also  installing 
the  Odyssey  reservation  system 
•  from  Perot  Systems  Corp. 

The  goal  is  to  begin  rolling 
the  new  systems  into  produc¬ 
tion  at  the  start  of  July  and  to 
complete  the  work  by  the  mid¬ 
dle  of  the  month.  From  the  per- 
:  spective  of  Vanguard’s  top 
management.  Best  said,  the  IT 
project  is  “the  No.  1  project  that 
the  company  has.” 

-Patrick  Thibodeau 


Software  Automates  Content 
Tracking  and  Management 


New  tools  help 
users  comply  with 
privacy,  financial 
reporting  rules 

BY  THOMAS  HOFFMAN 

Software  vendors  FileNet 
Corp.  and  IBS  America  Inc. 
have  each  developed  Web- 
based  systems  aimed  at  help¬ 
ing  users  to  automate  content 
tracking  and  management  for 
complying  with  regulations 
such  as  Sarbanes-Oxley, 
HIPAA  and  the  Basel  II  bank 
capital  accord. 

The  introduction  of  these 
so-called  compliance  frame¬ 
works  is  partly  a  reflection  of 
how  corporate  executives  are 


broadening  their  views  of  reg¬ 
ulatory  compliance,  said  AMR 
Research  Inc.  analyst  John 
Hagerty.  Increasingly,  compa¬ 
nies  are  leaning  toward  using 
IT  architectures  that  can  ad¬ 
dress  many  requirements  in¬ 
stead  of  trying  to  attack  each 
one  individually,  he  said.  But 
Hagerty  added  that  most  po¬ 
tential  users  have  yet  to  com¬ 
pletely  buy  into  the  compli¬ 
ance  framework  approach.  “I 
believe  customers  are  starting 
to  think  that  way,”  he  said. 

“But  I  would  not  say  that  they 
are  buying  that  way  yet.” 

FileNet’s  Compliance 
Framework,  which  is  being 
introduced  today,  is  designed 
to  help  corporate  managers 
audit  and  track  documents. 


The  browser-based  system 
uses  technology  from 
FileNet’s  existing  Enterprise 
Content  Management  product 
line  and  includes  modules  that 
support  collaboration  and  the 
management  of  records,  forms 
and  other  types  of  content. 

In  addition,  Compliance 
Framework  includes  an  event- 
driven  architecture  that  can 
quickly  identify  and  initiate 
responses  to  material  events, 
such  as  a  sudden  change  in 
projected  quarterly  sales,  ac¬ 
cording  to  FileNet  officials. 
That  feature  could  be  applied 
toward  Section  409  of  the  Sar¬ 
banes-Oxley  Act,  which  re¬ 
quires  companies  to  deliver 
timely  reports  to  investors. 

‘Compliance9  Market 

“From  a  macro  perspective, 
Sarbanes-Oxley  is  the  piece 
that’s  going  to  drive  the  bulk 
of  the  attention  around  the 


marketplace,”  said  Chris  Mc¬ 
Laughlin,  director  of  financial 
services  marketing  at  Costa 
Mesa,  Calif.-based  FileNet.  But 
he  added  that  the  vendor  is 
trying  to  provide  “a  good,  flex¬ 
ible  foundation  to  allow  cus¬ 
tomers  to  build  in  new  com¬ 
pliance  requirements”  to  meet 
other  forthcoming  regulations. 

Lexington,  Mass.-based  IBS 
America  last  week  announced 
QSI  Websystem  for  Compli¬ 
ance  Management,  which  is 
designed  to  automate  the 
process  of  identifying  who 
created  a  document,  tracking 
where  it  has  been  routed  and 
capturing  other  information. 

The  document-control  sys¬ 
tem  offers  role-based  user 
screens  and  expands  beyond 
an  existing  Notes-based  sys¬ 
tem  that  can  be  used  to  moni¬ 
tor  compliance  with  quality- 
assurance  standards  such  as 
ISO  9000,  IBS  said. 


Dana  Corp.  in  Toledo,  Ohio, 
has  used  the  Notes  software 
since  1996.  The  automotive 
parts  supplier  plans  to  roll  out 
QSI  Websystem  once  IBS  be¬ 
gins  shipping  a  version  of  the 
software  for  use  in  training  em¬ 
ployees,  said  Brian  Sniegocki,  a 
senior  IT  analyst  at  Dana.  That 
release  is  due  late  next  month. 

Sarbanes-Oxley  compliance 
is  one  of  the  big  drivers  of  the 
plan  to  use  QSI  Websystem, 
Sniegocki  said.  “In  our  organi¬ 
zation,  it’s  imperative  to  have  a 
browser-based  system  to  sim¬ 
plify  [document]  access,”  he 
said,  adding  that  the  software 
could  benefit  internal  business 
managers  as  well  as  suppliers 
and  customers.  ©  44610 
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IBM  Aims  Middleware  at  Financial  Firms 


BY  LUCAS  MEARIAN 

IBM  last  week  announced  15 
middleware  bundles  aimed 
specifically  at  applications  in 
the  financial  services  and  in¬ 
surance  industries,  such  as 
risk  and  compliance  manage¬ 
ment  and  claims  processing. 

The  bundles  are  the  first 
tangible  result  of  IBM’s  De¬ 
cember  announcement  that  it 
would  begin  tailoring  its  soft¬ 
ware  offerings  for  users  in  dif¬ 
ferent  industries  [QuickLink 
43213], 


grated  offerings  should  help 
users  reduce  software  imple¬ 
mentation  cycles.  IBM’s  move 
also  “eliminates  the  gaps”  be¬ 


tween  projects’  IT  and  busi¬ 
ness  requirements,  he  said. 

Doug  Brown,  director  of  in¬ 
dustry  marketing  for  IBM’s 


software  group,  described  the 
middleware  packages  as  “a 
head  start”  for  users. 

“In  the  past,  we  would  have 
had  our  salespeople  talk  with 
customers  about  applications, 
servers  or  security,”  he  said. 


“Now  we’re  in  a  conversation 
with  customers  about  people 
productivity,  integration  issues 
and  middleware  all  coming  to¬ 
gether  to  form  a  foundation  for 
the  project,  instead  of  individ¬ 
ual  product  parts.”  ©  44565 


out 

Strength  in  Numbers. 


The  financial  industry  pack¬ 
ages  are  made  up  of  existing 
IBM  products  and  include 
business  applications  from 
vendors  such  as  SAP  AG  and 
PeopleSoft  Inc.,  IBM  said. 

In  addition,  the  bundles  pro¬ 
vide  market-specific  function¬ 
ality  developed  by  Fidelity  In¬ 
formation  Services  Inc.,  Fiserv 
Inc.,  Sanchez  Computer  Asso¬ 
ciates  Inc.  and  other  vendors. 


Scalability  Needs 

Walter  Hatten,  senior  vice 
president  and  technical  ser¬ 
vices  manager  at  Hancock 
Bank  in  Gulfport,  Miss.,  said 
he’s  using  a  software  bundle 
that  IBM  put  together  for  him 
as  part  of  a  server  integration 
project  that  involves  moving 
Windows  and  OS/2  applica¬ 
tions  to  an  IBM  mainframe 
running  SUSE  Linux. 

The  package  includes  e-mail 
archiving  software  from  start¬ 
up  ZipLip  Inc.  to  help  the  bank 
address  Securities  and  Ex¬ 
change  Commission  rules  gov¬ 
erning  electronic  document 
retention,  Hatten  said. 

“There’s  just  been  a  tremen¬ 
dous  growth  over  the  years,” 
he  said,  noting  that  the  bank’s 
server  farm  has  grown  to 
about  500  systems.  “One  need 
we  had  was  scalability.  Being 
able  to  scale  in  a  mainframe 
environment  rather  than  a  PC 
environment  was  crucial.” 

IBM  said  there  won’t  be  any 
pricing  advantages  to  purchas¬ 
ing  the  bundled  software  com¬ 
pared  with  buying  the  prod¬ 
ucts  on  an  individual  basis. 

But  Bill  Bradway,  an  analyst 
at  Financial  Insights  in  Fram¬ 
ingham,  Mass.,  said  the  inte- 


Remedy  is  number  one  in  Service  Management. That  number  speaks  for  itself. 

However,  there  are  other  numbers  important  to  Remedy  customers.  Operating  cost  reductions, 
improvements  in  customer  satisfaction,  increased  employee  productivity,  shorter  time  to  value— the 
bottom-line  numbers  you  will  achieve  by  using  Remedy’s  out-of-the-box  best  practice  applications 
to  automate  service  management  processes. 

Your  success  depends  on  those  numbers.  Remedy  delivers  them. 


www.remedy.com/success 
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Faster  than  the  speed  of  change. 

Be  nimble.  Be  quick.  HP  Integrity  Servers  are  capable  of  executing  one  million 
transactions  per  minute  and  built  to  run  multiple  operating  systems  simultaneously. 
Supported  by  Intel®  Itanium®  2  technology,  Integrity  is  the  most  powerful  line  of 
industry-standard  servers  available  today.  Providing  you  with  the  computing 
power  to  adapt,  evolve  and  change  faster  than  anyone,  anywhere,  at  any  time. 
www.hp.com/info/integrity 


Hfinc&rej  Development  Company.  L.P  Intel  and  Itanium  ore  trademarks  or  registered  trademarks  of  [he  Intel  Corporolion  or  its  subsidiaries  in  the  United  Stoles  and  other  counlnes. 
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MARYFRAN  JOHNSON 


Chicken  little  Viruses 


WHEN  ALL  WAS  SAID  AND  DONE,  did 
Mydoom  spell  doom  for  your  com¬ 
pany?  Did  the  fast-spreading,  widely 
publicized  virus  bring  your  enterprise 
down  in  a  tangle  of  clogged  e-mail  systems  and  over¬ 
whelmed  servers  during  the  past  two  weeks? 
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hor  at  maryfran johnson® 
computerworM.com. 


Chances  are  it  didn’t 
do  any  such  thing. 

Though  you  would  cer¬ 
tainly  be  excused  for 
thinking  Armageddon 
was  at  hand,  given  the 
hyped-up,  sky-is-falling 
public  warnings  from  a 
handful  of  the  antivirus 
and  security  vendors. 

Mydoom  was  spun  up 
in  the  press  as  every¬ 
thing  from  the  harbinger 
of  “doom  to  corporate 
in-boxes”  to  the  “most  virulent  virus 
in  history,”  as  we  reported  last  week 
[“Antivirus  Software  Vendors  Fuel 
Mydoom  Hype,”  QuickLink  44430]. 

One  advisory  from  Sybari  Soft¬ 
ware  called  it  “a  huge  problem  for 
organizations,”  without  any  evidence 
to  back  that  up.  Central  Command 
initially  warned  its  customers  about 
serious  e-mail  congestion  at  compa¬ 
nies  “bombarded”  with  infected 
messages,  but  it  later  downgraded 
the  whole  event  to  a  “nuisance.” 
McAfee  rated  the  virus  a  “high  out¬ 
break”  threat  to  business,  although 
the  estimated  500,000  infected  sys¬ 
tems  turned  out  to  be  mostly  home 
users  and  small  businesses. 

No  question,  there  were  tens  of 
thousands  of  individuals  seriously 
inconvenienced  by  this  latest  virus 
to  target  the  ever-vulnerable  Win¬ 
dows  operating  system.  They  were 
no  doubt  kicking  themselves  after 
clicking  on  the  e-mail  attachment 
that  launched  it.  But  the  only  high- 
profile  business  victim  was  The  SCO 
Group’s  Web  site,  which  was  tem¬ 
porarily  shut  down  on  Super  Bowl 
Sunday  by  a  denial-of-service  attack 
connected  to  Mydoom.  A  subse¬ 
quent  attack  on  the  Microsoft  Web 
site  was  successfully  flicked  away. 


In  a  poll  on  Computer- 
world.com  last  week,  only 
7%  of  the  379  respondents 
said  their  companies  were 
affected  at  all.  Another 
14.5%  noted  some  net¬ 
work  infections,  but  38% 
said  they  noticed  nothing 
more  than  some  server 
strain  from  the  e-mail 
blasts,  and  another  38% 
said  they  just  saw  “more 
e-mail  than  usual.” 

This  so-called  over¬ 
whelming  threat,  fizzled  out  at  e-mail 
gateways,  thanks  to  IT  and  security 
managers  who  have  shored  up  com¬ 
pany  defenses  with  well-known  se¬ 
curity  practices  such  as  screening 
out  e-mail  attachments,  continually 
updating  antivirus  software  and 
monitoring  internal  networks  for  un¬ 
usual  traffic  patterns.  “We  were  sur¬ 
prised  by  how  little  it  affected  us,”  as 
one  telecommunications  service 
manager  put  it  [QuickLink  44429]. 

Wondering  if  it  was  just  my  imagi¬ 


nation  that  the  Mydoom  outbreak 
had  been  wildly  overplayed,  I  called 
security  expert  Bruce  Schneier,  CTO 
at  Counterpane  Internet  Security 
and  author  of  Beyond  Fear:  Thinking 
Sensibly  About  Security  in  an  Uncer¬ 
tain  World.  He  agreed  that  the  threat 
level  of  this  virus  was  overblown. 

But  in  his  colleagues’  defense,  he 
pointed  out  that  security  companies 
often  agonize  over  how  much  alarm 
to  raise  when  these  outbreaks  first 
occur.  In  the  frantic  guessing  game 
in  the  early  hours  of  a  virus’s  appear¬ 
ance,  some  prefer  to  hype  rather 
than  understate  the  dangers. 

Not  so  coincidentally,  the  hype 
sells  more  product.  What  better  time 
to  hawk  your  software  than  when 
every  media  outlet  is  shrieking 
warnings  about  the  need  for  it? 

As  Schneier  and  many  other  ex¬ 
perts  have  pointed  out,  the  only  real 
solution  lies  in  Microsoft  virus¬ 
proofing  its  own  software,  which  it’s 
obviously  unable  to  do.  In  the  mean¬ 
time,  IT  needs  to  be  able  to  rely  on 
credible  information  from  the  front 
lines  of  these  virus  outbreaks.  Secu¬ 
rity  vendors  that  keep  issuing  these 
Chicken  Little  virus  warnings  will 
ultimately  lose  their  credibility  with 
customers,  plus  their  reputations  as 
reliable  sources  with  the  media. 

Remember  how  the  Chicken  Little 
fable  ended?  Ask  the  fox.  ©  44577 


PIMM  FOX 

How  Super 
Bowl  Ads 
Help  Linux 

IT’S  ALMOST  IMPOSSIBLE 
to  know  if  spending  $2.3 
million  for  a  30-second 
Super  Bowl  spot  changed  the 

world’s  perception  of  Linux 
or  IBM.  But  it’s  clear  that  only  a  few  IT 
companies  have  the  resources  and 
brand  awareness  to  make  such  a  cam¬ 
paign  meaningful  to  a  mass  audience, 
and  IBM  is  one  of  them. 

IBM’s  strategy  to  plump  for  the  mass 
market  is  aimed  at  three  key  audiences, 
according  to  Christopher  Williams,  a 
marketing  strategist  at  Idea  Engineer¬ 
ing  Inc.,  a  Santa  Barbara,  Calif.,  market¬ 
ing  and  advertising  firm. 

“In  reaching  the  mainstream,  they 
are  reaching  the  IT  decision-makers, 
the  company’s  stake¬ 
holders  and  the  IBM 
shareholders,”  said 
Williams. 

With  its  Linux  ads 
starring  Muhammad 
Ali,  IBM  is  building 
potential  for  an  in¬ 
gredient  brand,  a  la 
Pentium  (it’s  a  name 
brand,  even  though 
it’s  just  an  ingredient 
inside  a  larger  prod¬ 
uct),  paving  the  way 
for  channel  advertising.  In  addition,  it 
will  have  a  platform  for  further  Linux 
advertising,  all  while  reinforcing  Linux 
as  a  good  business  decision  for  you 
and  your  bosses. 

“People  say  they  make  business  de¬ 
cisions  on  facts,  not  emotion,”  says 
Williams.  “But  emotion  does  play  a 
role  in  the  process.” 

Stakeholders  who  benefit  include 
customers  who  have  adopted  Linux. 
For  shareholders,  the  ads  bolster  confi¬ 
dence  in  IBM’s  forward-looking  busi¬ 
ness  strategy,  and  high-tech  stockhold¬ 
ers  like  to  see  companies  they  own  do¬ 
ing  something  cool  and  cutting-edge. 

The  ads  themselves  are  pretty  effec¬ 
tive,  considering  their  scope.  There’s 
no  way  IBM  can  communicate  the 
technology  or  business  benefits  of  Lin¬ 
ux  to  such  a  wide  audience,  so  the  ads 
have  to  go  for  an  emotionally  driven 
declaration:  “Shake  up  the  world.” 
Similarly,  Microsoft’s  Office  print 
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Is  your  storage  strategy  focused 
on  the  future?  Want  to  learn 
important  new  strategies  from 
IT  executives  and  managers  at 
companies  like  FleetBoston 
Financial,  Pacific  Gas  &  Electric 
and  Public  Broadcasting 
Service?  Then  plan  to  be  at 
Storage  Networking  World! 


•  Storage  Management 

•  Enterprise  Infrastructure 

•  Business  Continuity 

•  Data  Management 
and  Security 

•  Emerging  Technologies 


Why  You  Should  Attend 


Benefit  From  the  Most  Comprehensive  Program 

No  other  storage  event  gives  you  a  program  so  rich  with  experiences  -  whether  they’re 
industry  and  certification  primers,  general  sessions,  tutorials,  opportunities  to  see  technologies 
at  work ...  or  the  rare  chance  to  talk  to  the  very  engineers  that  make  them  work. 

Easily  Navigate  an  Agenda  Packed 
With  Choices  and  Learning  Experiences 

No  other  storage  event  provides  an  agenda  woven  with  so  many  logical  choices  -  choices 
that  allow  you  to  tailor  your  valuable  time  to  your  very  specific  needs.  (See  the  full  agenda  at 
www.snwusa.com/print.) 

Get  an  Education  Endorsed  by  the  SNIA 

No  other  storage  event  offers  a  learning  experience  developed  and  sanctioned  by  the  industry’s 
most  influential  storage  association  -  highlighted  by  the  SNIA-delivered  technical  tutorial  sessions. 


w  IDC  Storage  Analyst  Briefing 
The  Impact  of  Tiered  Storage 

an  IDC  breakfast  briefing 


In  this  fast-paced  breakfast  session,  IDC’s  top 
storage  analysts  will  examine  companies'  growing 
interest  in  deploying  tiered  storage  solutions  and 
assess  its  impact  on  storage  components,  systems, 
networks,  management  and  services.  Analysts  will 
address  topics  including: 


Meet  Experts  and  Shop  in  the  Largest  Available 
Storage-specific  Solutions  Mall 

No  other  storage  event  allows  you  to  see  all  the  players  and  solution  providers  in  one  place.  It’s 
literally  your  one-stop  "solutions  mall.” 

See  SNW’s  Flagship  Interoperability  &  Solutions  Demo 


•  Form  factor  and  drive  technologies 

•  Heterogeneous  data  replication  and  protection 

•  The  demand  for  mixed  media  arrays 

•  Network-based  storage  services 

•  Storage,  file  and  content  management 


No  other  storage  event  gives  you: 

•  40-plus  SNIA  member  companies  collaborating 
on  integrated  solutions 

•  the  opportunity  to  meet 
leading  experts  and  engineers 

•  access  to  $25  million  worth 
of  proven  technology  in  action 


CEEITOilM.!^ 


DEMO, 
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•  Technology  migration  cycles 

•  Storage  workloads 

This  session  is  intended  for  IT  vendors;  no  non-lDC 
analysts  permitted  in  this  special  session. 


For  more  information  and  to  register, 
visit  www.snwusa.com/print  or  call  1-800-883-9090  (1-508-820-8159) 


“...  Not  only  were  there  REAL  users  all  over 
JL  J  the  place,  but  the  buzz  was  awesome.  I 
V"L-  I  commend  SNW  for  putting  their  money 
where  their  mouth  is  and  putting  together 
a  rea||y  great  conference ...” 

Steve  Oupfessft) 

Founder  I  Soraor  Analyst 
Edtcrprcx  Storage  Or  cup 


“...  an  opportunity  to  share  storage 
issues  and  learn  about  new 
solutions  from  your  peers ...” 

Jerry  McEfbatlon 

Senior  EVP.  GtohaJ  Technology  and  Operations 
MasterCard  International 


“. ..  the  right  mix  of  attendees  -  high- 
end  users  and  major  executives 
with  great  reputations ...  I  am  very 
impressed  with  the  balance  ...  the 
event  is  at  the  top  of  my  list  ..." 


SVP.  Broadcast  Entertamnient  Technology 
Turner  Entertaaanent 


and  Lftarn  From  Industry  Experts 


DAVID  KAERCHER  STEVE  DUPLESSIE  JOHN  OAYTHORFE  JIM  MODDE  LARI  SUE  TAYLOR  DOUG  BUSCH  RICK  PELTZ  -*^1  JOHN  GREER  ANDRE  MENDES  JIM  DAVIS 


VP.  Information  Technology  Founder  &  Senior  Analyst 
Allianz  Life  Insurance  Enterprise  Storage  Group 


Director.  Systems 
Epsilon 


Chief  Security  Officer  SVP.  Enterprise  Security 
Farm  Credit  Services  &  Recovery 

of  America  FleetBoston  Financial 


VP  &  CIO 
Intel 


SVP  &  CIO  Director.  IT  Infrastructure  Chief  Technology 

Marcus  &  Millichap  Pacific.  Gas  &  Electric  Integration  Officer 

Public  Broadcasting  Service 


SVP 

SAS  Institute 


Agenda  Snapshot*  •subject  to  change 

For  details,  updates,  and  to  register  visit  www.snwusa.com/print 

Monday,  April  5 

(Pre-Conference  Activity  and  Tutorial  Sessions) 

9:30am-11:30am  Industry  Primer.  Career  Development  and  Skills  Development  Tracks 
1:00pm-5:30pm  SNIA  Tutorial  Sessions 
Noon-5:00pm  Golf  Outing  at  the  Wildfire  Golf  Club,  Faldo  Course 
7:00pm-9:00pm  Welcome  Reception 


Enjoy  the  JW  Marriott  Desert  Ridge  Resort  in  Phoenix! 


No  other  storage  event  allows  you 
to  learn,  network  and  enjoy  the 
conference  in  such  a  relaxing, 
comfortable  and  unique  setting. 


Tuesday,  April  6 

(General  Conference  -  Day  One) 

7:15am-8:15am 

Continental  Breakfast 

8:15am-9:15am 

Opening  Remarks  and  Visionary  Presentation 

9:15am-12:15pm 

General  Sessions 

12:15pm-1:30pm 

Networking  Luncheon 

1:30pm-3:50pm 

General  Sessions 

4:00pm-5:30pm 

Technical.  Technical/Business  and  Business  Tracks 

5:30pm-8:30pm 

Expo  and  Buffet  Dinner.  Interoperability  and  Solutions  Demo 

Wednesday,  April  7 

(General  Conference  -  Day  Two) 

7:30am-10:30am 

IDC  Breakfast  Briefing 

8:15pm-Noon 

General  Sessions 

Noon-1:30pm 

Expo  and  Buffet  Lunch 

Noon-7:15pm 

Interoperability  &  Solutions  Demo 

1:35pm-3:35pm 

General  Sessions 

3:45pm-5:15pm 

Technical.  Technical/Business,  Business  and  SNIA  Tracks 

5:15pm-7:15pm 

Expo 

7:30pm-9:00pm 

Gala  Evening 

Thursday,  April  8 

(Tutorial  and  Breakout  Sessions) 


Register  Today! 


Options  for  IT  End-Users* 

Earlybird  Registration 

(through  February  27) 

Full/Onsite  Registration 

(after  February  27) 

General  Conference  Package  (April  6, 7): 

(Includes  General  Conference  sessions,  Expo. 

Meals  and  Receptions) 

$895 

$1,295 

Total  4-day  Package  (April  5, 6, 7, 8): 

(Includes  General  Conference  Package:  Technical  and 
Business  Tracks:  SNIA-produced  Tutorials;  SNIA-Certification 
"Test-Ready"  Courses) 

$1,290 

$1,690 

Options  for  IT  Vendors** 

Total  4-day  Package  (April  5, 6, 7, 8): 

$1,290 

$1,690 

(Available  to  Sponsoring  Vendors  and  their  Resellers/Integrators;  Industry  Consultants;  and  Storage  Solutions  Implementors) 

Non-Sponsoring/Exhibiting  Vendor  Package: 

$5,000 

$5,000 

*  IT  End-Users  are  defined  as  those  who  are  attending  Storage  Networking  World  with  an  intent  (and  an  IT  spending  budget)  to  potentially 
buy/lease  hardware/software/services,  etc.  from  our  conference  sponsors  and  exhibitors.  As  such,  account  representatives,  business 
development  personnel,  analysts,  and  anyone  else  attending  who  does  not  have  IT  purchasing  influence  within  their  organization  are 
excluded  from  the  “IT  End-User"  designation.  Interpretation  and  enforcement  of  this  policy  is  at  the  sole  discretion  of  Computerworld. 
Please  call  1-800-883-9090  with  questions. 


7:30am -8:30am  Continental  Breakfast 

8:30am-11:45am  Technical.  Technical/Business,  Business  and  SNIA  Tracks 
11:45am  Conference  Concludes 


Vendors  are  encouraged  to  participate  at  Storage  Networking  World  through  sponsorship.  (Details  are  available  by  calling  Ann  Harris  at 
1-508-820-8667.)  Alternatively,  vendors  (as  well  as  venture  capitalists,  equity  analysts,  and  other  “non-IT  end-user"  professionals  as 
defined  by  Computerworld),  may  apply  for  registration  at  the  "non-sponsoring  vendor”  rate.  Determination  of  what  constitutes  a  “non¬ 
sponsoring  vendor"  registration  is  at  the  sole  discretion  of  Computerworld.  You  will  also  be  required  to  adhere  to  our  non-solicitation  policy 
posted  on-site. 


“Best  Practices  in  Storage” 

Awards  Program 

Golf  Outing6006  BM 

Travel  and 

Accommodations 

Submit  your  nomination  today  at 

www.snwusa.com/print 

or  email  Nanette  Jurgelewicz  at 
nanette.jurgelewicz@computerworld.com 

Awards  Ceremony:  Wednesday. 

April  7, 3:05pm.  SNW  Main  Stage 

™/BEST 

PRACTICES  IN 

STORAGE 

AWARDS  PROGRAM 

Complimentary  for  Registered  IT  End-Users 

The  Pre-Conference  Golf  Outing  at  The  Wildfire  Golf  Club,  Faldo  Course 
located  at  the  JW  Marriott  Desert  Ridge  Resort,  is  complimentary  ($165 
value)  for  registered  IT  End-Users  (other  participants,  including  sponsors 
and  vendors,  may  play  on  an  "as  available"  basis  and  are  responsible  for 
all  applicable  goll  outing  expenses). 

For  details:  contact  Michael  Meleedy  at  1-508-820-8529 

IDG  Travel  is  the  official  travel  ==  TT~\/'—’ 

company  for  Storage  Networking  1  L/  Vt 

World.  They  are  your  one-stop  shop 

for  exclusive  discounted  rates  on  travel  and  hotel 

accommodations. 

To  reserve  your  accommodations: 

visit  www.etcentral.com  OR 

call  1-800-340-2262  (or  1-508-820-8686) 

For  more  information  and  to  register, 
visit  www.snwusa.com/print  or  call  1-800-883-9090  o  sos  820  sisg) 


“...  the  Interoperability  &  Solutions  Demo 
gives  us  a  flavor  for  the  technology  that's 
coming  out ...  a  chance  to  ‘kick  the  tires’ 
and  talk  (0  vendors ...” 

Mrcirttt  Goods 
Director  Storage  Servccs 
Hrnkxn  Urdu  Re&oarch 


"...  what  sets  SNW  apart  is  the 
networking  opportunities ..." 

Brad  Friodnian 

VP.  Information  Services 

Burtngton  Coal  Factory 


"...  I  enjoy  the  opportunity  to  share 
my  experiences  and  hear  what 
other  people  are  doing ..." 

BgbIMien 
Second  VP  IT  Optrttiora 
Guardian  Lite  tounmot 


Application  for  Conference  Registration 


STORAGE 

NETWORKING 

WORLD 


April  5-8,  2004 

JW  Marriott  Desert  Ridge  Resort 
Phoenix,  Arizona 


Co-owned  &  Produced  by 

COMPUTERWORLD 


Co-owned  &  Endorsed  by 


Reserve  your  Accommodations  at: 
www.etcentral.com 

Questions  about  accommodations? 
Please  Cali  1-800-340-2262  or 
Email:  eventhousing@idg.com 


Registration  questions?  Please  call  1-800-883-9090  or  Email:  snwreg@computerworld.com 


Visit  our  website  at: 

www.snwusa.com/print 

Options  for  IT  End-Users* 

Earlybird 

Registration 

(Available  through  February  27) 

Full/Onsite 

Registration 

(after  February  27) 

General  Conference  Package  (April  6, 7): 

(Includes  General  Conference  sessions.  Expo.  Meals  and  Receptions) 

□$895 

□$1,295 

Total  4-day  Package  (April  5, 6, 7, 8):  a$1,290 

(Includes  General  Conference;  Technical  and  Business  Tracks;  SNIA-produced  Tutorials;  SNIA-Certification  “Test-Ready"  Courses) 

□$1,690 

Options  for  IT  Vendors** 

Total  4-day  Package  (April  5, 6, 7, 8):  □$1,290 

(Available  to  Sponsoring  Vendors  and  their  Resellers/Integrators;  Industry  Consultants;  and  Storage  Solutions  Implementors) 

□$1,690 

Non-Sponsoring/Exhibiting  Vendor  Package: 

□$5,000 

□$5,000 

*  IT  End-Users  are  defined  as  those  who  are  attending  Storage  Networking  World  with  an  intent  (and  an  IT  spending  budget)  to  potentially  buy/lease  hardware/software/services,  etc.  from  our  conference  sponsors  and  exhibitors.  As  such, 
account  representatives,  business  development  personnel,  analysts,  and  anyone  else  attending  who  does  not  have  IT  purchasing  influence  within  their  organization  are  excluded  from  the  "IT  End-User"  designation.  Interpretation  and 
enforcement  of  this  policy  is  at  the  sole  discretion  of  Computerworid.  Please  cal!  1-800-883-9090  with  questions. 


Vendors  are  encouraged  to  participate  at  Storage  Networking  Worid  through  sponsorship.  (Details  are  available  by  calling  Ann  Harris  at  1-508-820-8667.)  Alternatively,  vendors  (as  well  as  other  "non-IT  end-user"  professionals  as  defined 
by  Computerworid),  who  choose  not  to  sponsor  may  apply  for  registration  at  the  "non-sponsoring  vendor"  rate.  Determination  of  what  constitutes  a  “non-sponsoring  vendor"  registration  is  at  the  sole  discretion  of  Computerworid.  You  will  also  be 
required  to  adhere  to  our  non-solicitation  policy  posted  on-site. 

CODE:  PRINT 


Registration  Information: 


First  Name: _  Middle  Initial: _  Last  Name: 


TitlesY-ffi  %  £  '// " ^1»  _ 

Street  Adijtesl| _  Suite,  Apt.,  etc.: 


City: _  State/Prov:  a  Zio/Postat  Code: 

Country: _  Phone  Number: _ Extension: _ 


Fax  Number: 


E-Mail  Address: 


Corporate  Website: _ □  Special  Services  Required?  (Please  attach  written  description) 

Would  you  like  to  receive  information  about  the  golf  outing  on  Monday.  April  5th?  □  Yes  □  No 


Attendee  Profile:  (This  section  must  be  completed  in  order  to  process  your  application) 


Payment  Method 


SECTION  A  -  FOR  IT  END-USERS  ONLY 

Your  Business/Industry: 

□  Transportation/Utilities 

□  Mining/Oil/Gas 

□  Media/Publishing 

□  Banking/Finance/Insurance 

□  Telecommunications 

□  Wholesale/Retail  (Non-IT) 

□  Advertising/Marketing/Public  Relations 

□  Education 

□  Government/Military 

□  Healthcare 

□  Manufacturing  (Non-IT) 

□  Other 

Your  Job  Title/Function: 

□  CEO/COO/Chairman/President 

□  CIO/CTO 

□  CFO/Controller/Treasurer 

□  VP/GM/Director 

□  IS/IT  Director/Manager 

□  Other  IS/IT  Department 
Manager/Supervisor 

□  Other  Corporate/Business  Manager 

□  Corporate/Business  Staff 

□  Consultant  (Internal)  or  Other 

□  Sales/Marketing/Product  Staff 

□  Engineering  Staff 

□  Press 


The  one  item  that  best  describes  your 
involvement  in  the  IT  purchase  process: 

O  Authorize  the  purchase 

□  Approve  the  budget 

□  Initiate  the  purchase 

□  Evaluate/recommend  products,  brands,  vendors 

□  Identify/establish  the  need  to  purchase 
Employees  in  your  entire  Company: 

□  Over  10.000 

□  5,000-9,999 

□  1.000  -  4.999 

□  500-999 

□  100-499 

□  Under  100 

What  is  the  estimated  annual  revenue 
of  your  entire  organization?: 

□  Over  $10  Billion 

O  $1  Billion  -  $9.9  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  $499  Million 
O  Under  $100  Million 

Your  organization’s  annual  IT/IS  budget 
for  all  IT/IS  products): 

□  Over  $1  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million -$499  Million 

□  $10  Million- $99  Million 

□  $1  Million  -  $9.9  Million 

□  Under  $1  Million 


Annual  company  IT  budget 
(Storage  products  and  services): 

□  Over  $1  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  -  $499  Million 
O  $10  Million  -  $99  Million 

□  $1  Million- $9.9  Million 

□  Under  $1  Million 

Your  .personal  IT  spending  authority 
(All  IT  products  and  services): 

O  Over  $1  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  -  $499  Million 

□  $10  Million  -  $99  Million 

□  $1  Million- $9.9  Million 

□  Under  $1  Million 

Your  personal  IT  spending  authority 
(Storage  products  and  services): 

□  Over  $1  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  -  $499  Million 

□  $10  Million  -  $99  Million 

□  $1  Million  -  $9.9  Million 

□  Under  $1  Million 


SECTION  B  -  FOR  IT  VENDORS  ONLY 

Your  Business/Industry: 

□  VAR/VAD/ASP/System  Integrator 

□  Industry  Consultant/Storage  Solution  Integrator 

□  Manutacturing  (IT) 

□  Computer  Retailer/Dealer/Wholesaler 

□  Software  Development  (Storage) 

□  Other  Computer  Related  (Non-Storage) 


Your  Job  Title/Function: 

□  CEO/COO/Chairman/President 

□  CFO/Controller/Treasurer 

□  VP/GM/Director 

□  Sales/Marketing/Product  Staff 

□  CIO/CTO/Other  IS/IT  Manager 

□  Engineering  Staff 

□  Press 


□  Check  (checks  must  be  received  by  March  19. 2004  payable  to: 
Computerworid) 

Mail  to:  Computerworid,  Attn:  Pam  Malingowski, 

500  Old  Connecticut  Path,  Framingham,  MA  01701 

□  American  Express  □  VISA  □  MasterCard 
Account  Number: 


Expiration  Date: _ 

Card  Holder  Name: 


Signature  of  Card  Holder: 


Cancellation  Policy 

In  the  event  of  cancellation,  the  registrant  has  three  options,  all  of  which 
require  written  notification: 

1)  He  or  she  may  substitute  another  attendee  for  this  conference. 

2)  He  or  she  may  transfer  this  registration  to  the  Storage  Networking  World 
Fall  2004  conference. 

3)  The  registration  fee  will  be  refunded,  less  a  $250  service  charge  (if 
written  notice  is  received  by  March  19, 2004). 

Please  send  cancellation  requests  via  email  to: 
snwreg@computerworld.com 


Please  fax  this  completed  application  to  508-820-8254 
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and  TV  campaign  not  only  aims  at  IT 
decision-makers,  but  also  leapfrogs 
them  to  get  at  the  end  user,  creating  a 
sense  of  goodwill  that  could  pay  off 
when  it’s  time  for  the  buying  decision. 
“It  helps  the  Microsoft  salespeople,” 

!  said  Williams. 

But  not  every  company  is  an  IBM  or 
a  Microsoft.  Such  behemoths  can  take 
advantage  of  long-term  market  shifts 
and  calculate  the  ROI  of  Super  Bowl 
spending,  but  other  IT  vendors  that 
want  successful  ad  and  marketing  cam¬ 
paigns  have  to  get  realistic.  “They  need 
to  think  about  the  costs  of  advertising 
and  marketing  and  whether  it  is  going 
to  get  their  business  where  it  needs  to 
go,”  says  Williams. 

Ultimately,  that  means  IT  vendors 
need  to  reach  you  with  their  messages, 
whether  in  the  pages  of  Computer- 
world  or  its  competitors,  or  during  the 
Super  Bowl.  So  the  next  time  you’re 
wondering  why  Computer  Associates 
would  spend  a  fortune  to  advertise 
during  the  football  playoffs,  remind 
yourself  that  it’s  because  you’re  sitting 
there  watching.  ©  44474 

DAN  GILLMOR 

Paperless 
E-voting  Is 
A  Threat 

IN  THE  electronic-voting 
scandal  that  threatens  one 
of  our  most  fundamental 
duties  in  a  democracy  —  vot¬ 
ing  —  there’s  a  small  amount 
of  good  news  but  plenty  of  bad  news. 
Which  is  why  I’m  going  to  ask  IT  peo¬ 
ple  to  do  something  that  may  seem,  at 
first  glance,  overtly  political. 

In  reality,  this  isn’t  about  politics.  It’s 
about  the  first  duty  of  a  citizen:  voting. 
IT  people  have  a  unique  chance  to 
help  save  the  franchise  from  some 
know-nothing  bureaucracies  and 
-greedy  corporations  that  are  threaten¬ 
ing  the  foundations  of  democracy. 

The  issue  is  bubbling  up  over  two 
basic  technologies.  The  first  is  the  use 
of  touch-screen  computers  —  devices 
that  always  have  bugs  and  can  be 
hacked  —  with  no  paper  trail.  This  is, 
in  a  word,  nuts. 

Imagine  if  banks  refused  to  give  pa¬ 
per  receipts  for  ATM  transactions,  or  if 
merchants  didn’t  print  receipts  for 
credit  card  purchases.  The  use  of 
ATMs  and  credit  cards  would  plunge. 


OPINION 


not  because  we’d  believe  our 
financial  institutions  were 
ripping  us  off,  but  because 
we’d  have  no  way  of  proving 
that  they  weren’t. 

Yet  jurisdictions  across 
the  U.S.  are  installing  such 
machines  for  voting  —  in¬ 
cluding,  I’m  embarrassed  to 
say,  the  county  in  the  heart 
of  Silicon  Valley,  where  offi¬ 
cials  have  basically  laughed 
off  warnings  that  this  kind 
of  system  is  dangerous. 

A  few  state  officials  are 
beginning  to  wake  up.  California  will 
require  a  paper  trail  by  2006,  but  other 
jurisdictions  prefer  just  to  do  what  the 
vendors  tell  them,  and  that’s  an  abdica¬ 
tion  of  public  responsibility. 

All  this  is  bad  enough.  But  now  the 
federal  government  is  moving  forward 
with  a  scheme  to  have  expatriates  and 
members  of  the  military  vote  over  the 
Internet  using  Windows  computers 
from  places  such  as  Internet  cafes. 


The  average  IT  person, 
having  read  that  sentence, 
is  surely  shaking  his  head 
in  disbelief  at  the  govern¬ 
ment’s  folly,  [ft  was  learned 
on  Thursday  that  this  plan 
has  been  put  on  hold  —  Ed.] 
Four  members  of  a  team 
looking  into  the  Internet 
voting  idea  became  so 
alarmed  at  the  prospect 
that  they  jumped  the 
scheduling  gun  and  issued 
an  early  report  of  their 
own.  They  are  widely  ac¬ 
knowledged  as  experts,  and  their  re¬ 
port  was  scathing  [QuickLink  44255]. 

Read  the  report  at  www.servesecurity 
report.org,  and  then  do  something  to 
help  save  our  democracy  from  people 
who  endanger  it  so  cavalierly.  Part  of 
your  job  as  an  IT  person  is  to  recognize 
the  inherent  flaws,  in  people  and  ma¬ 
chines,  that  make  information  technolo¬ 
gy  so  annoying  and  interesting.  You 
know  that  systems  have  problems  for 


human  and  technical  reasons,  and  a  big 
part  of  your  job  is  to  ensure  that  when 
—  not  if —  you  have  problems,  you  can 
recover.  So  you  make  sure  there  are 
backups  and  true  redundancy.  You 
work  hard  to  prevent  malfeasance  from 
within  the  organization  or  from  outside. 

The  voting  machine  companies  and 
Internet  voting  advocates  have  done 
an  abysmal  job  with  security.  We  don’t 
have  to  believe  someone  will  steal  an 
election  —  though  people  will  surely 
try  —  to  worry  that  simple  bugs  will 
create  wrong  results. 

Please  call  your  local  voting  officials 
and  member  of  Congress.  Ask  your 
CIO  or  CEO  to  raise  hell. 

You  have  credibility.  If  you  don’t  use 
it,  we  could  lose  something  precious. 
You  can  make  a  difference.  I  beg  you 
to  try.  ©  44473 

WANT  OUR  OPINION? 

OMore  columnists  and  links  to  archives  of  previous 
columns  are  on  our  Web  site: 

www.computerworld.com/columns 


Sears  CEO  Blasted 
For  Offshoring  Quip 

Editor’s  note:  Our  story  on 
Sears  CEO  Alan  Lacy  [Quick- 
Link  44157]  was  posted  on  Fri¬ 
day,  Jan.  16.  In  it,  Lacy  praised 
offshoring  and  said  that  “there 
are  four  or  five  times  as  many 
smart,  driven  people  in  China 
than  there  are  in  the  U.S.  And 
there’s  another  four  or  five, 
three  or  four  times  as  many 
people  in  India  that  are 
smarter  or  as  smart  or  have 
more  drive.”  On  Monday,  Jan. 
19,  Sears  issued  an  apology  and 
said  it  has  no  plans  specifically 
related  to  offshoring.  We 
added  an  editor’s  note  to  our 
story,  but  before  we  could  do 
so,  we  were  inundated  with 
outraged  letters.  Some  samples: 

I’VE  GOT  NEWS  for  Lacy:  Those 
“smart,  driven"  people  in  China 
and  India  aren’t  shopping  at  Sears. 
The  employees  he  fires  won’t  be 
shopping  at  Sears  either.  Lacy  is  on 
a  fool's  errand  to  improve  his  prof¬ 
itability  next  quarter.  You  don’t  have 
profits  if  you  don’t  have  customers. 
Marik  Edwards 
Chubbuck,  Idaho 

■HAVE  BEEN  in  IT  for  over  37 
years,  and  I  don’t  recall  a  more  in¬ 


sulting  and  demeaning  comment 
than  the  one  from  Lacy.  It’s  the 
smart  and  driven  people  in  the  U.S. 
who  have  made  it  the  leading  tech¬ 
nology  country  on  the  planet. 

Don  Greb 
Pittsburgh 

MIGHT  I  point  OUT  that  none 
of  the  people  in  China  and  In¬ 
dia  are  Lacy’s  customers?  Might  I 
also  point  out  that  I  consider  myself 
“smart”  and  possessing  “drive"  and 
that  I  am  no  longer  one  of  his  cus¬ 
tomers  either? 

Chris  Herzog 

Software  Technologies  Group 
Inc.,  Westchester,  III. 


It’s  for  the,  er,  Moths 

I  FOUND  your  cartoon  on  “Future 
Outsourcing  Opportunities"  hu¬ 
morous,  especially  the  proposal  for 
the  bald  eagle  [Opinion.  Jan.  19]. 
The  problem  with  that  solution, 
though,  is  that  there  are  no  hum¬ 
mingbirds  in  Europe.  They  are  na¬ 
tive  to  the  Americas.  Perhaps  a  Eu¬ 
ropean  bunting  would  do  the  trick. 
Michael  Smith 
Senior  database  analyst, 

State  of  Maine,  Augusta 

Editor  s  note:  We  were  actual¬ 
ly  thinking  of  the  European 
hummingbird  hawkmoth.  Ad¬ 


mittedly,  it’s  not  a  bird,  but 
somehow  that  seemed  funny 
to  us  at  the  time. 


All  You  Need  Is  Cash 

■believe  it  was  Archimedes  who 
said  something  like,  “Give  me  a 
place  to  stand  and  a  big  enough 
check  and  I  can  move  the  world!" 
[“Merging  Mainframes,”  QuickLink 
43556] 

C.  Wayne  Hardeman 

Memphis 


Don’t  Let  Data  Fall 
Into  Wrong  Hands 

IT  MAY  interest  you  to  know  that 
several  decisions  have  been 
made  recently  that  acknowledge 
the  need  for  the  persistent  protec¬ 
tion  of  data,  in  motion  and  at  rest 
[“Data  Security  Breaches  Reveal 
Encryption  Need,"  QuickLink 
43743], 

The  Defense  Information  Sys¬ 
tems  Agency  has  selected  ANSI 
standards  X9.69  and  X9.73  for  the 
worldwide  deployment  of  the  De¬ 
fense  Collaborative  Tool  Suite.  The 
Office  of  the  Assistant  Secretary  of 
Defense  for  Homeland  Defense  has 
selected  the  same  technology  for 
the  dissemination  of  information 
throughout  the  Homeland  Defense 
Organization.  Sandia  National  Labo¬ 


ratories  has  also  been  working  with 
the  same  technical  approach,  called 
constmctive  key  management,  to 
provide  role-based  access  control  to 
information  at  the  object  level,  using 
content  descriptors  as  triggers  for 
the  cryptographic  process.  The  Na¬ 
tional  Guard  has  contracted  for  the 
use  of  the  CKM  technology  for  the 
controlled,  appropriate  access  to  in¬ 
formation  on  its  Web  portal. 

This  affords  a  mechanism  to  fol¬ 
low  the  data-centric  approach  nec¬ 
essary  to  achieve  the  objective  of 
“only  handling  information  once,”  a 
concept  known  as  OHIO,  with  the 
proper  people  seeing  that  set  or 
subset  of  information  consistent 
with  their  respective  role. 

Jay  Wack 

CEO,  Tecsec  Inc.,  Vienna,  Va., 
jayw@tecsec.com 

C0MPUTERW0RLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computerworld, 
P0  Box  9171, 500  Old  Connecticut 
Path,  Framingham,  Mass.  01701. 
Fax:(508)879-4843. 

E-mail:  letters@computerworid.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 

OFor  more  letters  on  these  and 
other  topics,  go  to 

www.computerworld.com/letters 


SAS,  the  leader  in  business  intelligence  software,  challenges 
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ENTERPRISE  INTELLIGENCE 

SUPPLIER  INTELLIGENCE 

ORGANIZATIONAL  INTELLIGENCE 

CUSTOMER  INTELLIGENCE 

INTELLIGENCE  architecture 


With  Sarbanes-Oxley  compliance  deadlines  less  than  a  year  away,  there  is  an  urgency  to  deliver  financial  and  operational 
transparency  -  one  clean,  consolidated  and  truthful  version  of  data  for  all  your  disclosure  controls  and  procedures. 
SAS®  Corporate  Compliance  software  provides  auditable,  searchable  process  and  document  control  solutions.  So  you 
can  prepare  now,  while  creating  a  system  that  won’t  be  outdated  when  the  next  new  legislation  is  enacted.  Our  intuitive 
interfaces  are  designed  for  users  of  any  skill  level  -  with  a  central  point  of  control  to  manage  across  all  environments 
-  and  an  open,  adaptable  architecture.  To  find  out  more  about  how  to  confidently  comply  with  Sarbanes-Oxley,  including 
Section  404,  call  us  toll  free  at  1  866  270  5729  or  visit  our  Web  site. 

www.sas.com/sox 


Proud  Sponsor  - 


March  7-9 
2004 

JW  Marrior '  esert 
Springs  Resort,  Palm 
Desert.  CA 


The  Power  to  Know. 


SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA 
registration.  Other  brand  and  product  names  are  trademarks  of  their  respective  companies.  ©  2004  SAS  Institute  Inc.  All  rights  reserved.  265472US.0104 


0209.04 


FUTURE  WATCH  SECURITY  MANAGER’S  JOURNAL 

Rushing  Toward  Chaos  Postmerger  Audit  Quashes  Trust  Idea 


Technology  futurist  Chris  Meyer 
says  IT  is  maturing.  His  advice: 
Outsource  commodity  IT,  em¬ 
brace  the  new  sciences,  and  live 
on  the  edge  of  chaos.  Page  32 


Mathias  Thurman  turns  his  attention  away 
from  Sarbanes-Oxley  compliance  to  audit  a 
newly  acquired  company  for  security  holes  — 
and  finds  that  it’s  inadequately  protected. 

Page  34 


OPINION 

Sun  Refuses  to  Be  Eclipsed 

Sun’s  anxious  response  to  the 
Eclipse  Foundation’s  new  inde¬ 
pendence  can  be  traced  to  com¬ 
peting  user-interface  tools,  says 
Nicholas  Petreley.  Page  36 


AN  IT  ARCHITECTURE  FOR  THE 


STICKING  TO  A  VISION  has  its 
rewards.  For  AXA  Financial 
Services  LLC,  those  rewards 
add  up  to  about  $55  million, 
which  is  what  IT  executives 
figure  they’ve  saved  by  ad¬ 
hering  to  a  blueprint  for  the 
services-based  computing  architecture 
the  company  first  laid  out  in  1990. 

Over  the  past  13  years,  the  technolo¬ 
gies  have  changed,  but  the  central  vi¬ 
sion  of  a  scalable,  future-proof  IT  ar¬ 
chitecture  based  on  reusing  a  core  set 
of  software-based  services  has  stayed 
intact.  The  payoff  has  come  from  the 
ability  to  quickly  and  cost-efficiently 
develop,  deploy  and  manage  new  ap¬ 
plications  across  myriad  customer 
channels,  which  the  $480  billion  insur¬ 
er  says  gives  it  an  edge  in  an  industry 
better  known  for  its  IT  conservatism. 

The  business  driver  for  the  architec¬ 
tural  blueprint  is  the  same  today  as  it 
was  more  than  a  decade  ago,  says  AXA 
Chief  Technology  Officer  Don  Bus- 
kard,  one  of  the  drafters  of  the  blue¬ 
print.  “Anything  we  do  and  have  to 
redo  is  a  negative-ROI  project  because 
we’re  just  duplicating  something  we  al¬ 
ready  did  and  spending  money  to  do  it 
without  adding  much  value,”  he  says. 

Common  Services 

The  three  key  reusable  services  the 
AXA  IT  architecture  provides  to  all 
applications  are  common  data  access, 
data  translation  and  security.  These 
were  initially  developed  by  internal 
software  developers  who  created  pro¬ 
prietary  code.  Over  time,  however,  as 
new  technologies  have  become  avail- 


■  Objective:  Minimize 
development  costs  and 
ensure  quality  by  design¬ 
ing  an  IT  architecture 
based  on  a  core  set  of  reusable  services. 

■  Challenges:  Developing  the  services  in¬ 
ternally.  Later,  as  AXA  phased  out  proprietary 
code,  the  issue  became  choosing  the  right 
commercial  products  to  replace  its  home¬ 
grown  programs. 

■  Payoff:  The  ability  to  quickly  and  cost- 
efficiently  develop,  deploy  and  manage  new 
applications  across  customer  channels  has 
saved  the  company  some  $55  million  in 
development  costs. 

■  Advice:  Have  a  blueprint  of  your  IT  archi¬ 
tecture  and  stick  to  it.  “It’s  a  management  is¬ 
sue,"  says  AXA  CIO  Bill  Levine.  “You  don't  let 
developers  go  around  it.” 

able  from  commercial  IT  vendors, 

AXA  has  adopted  a  strategy  of  swap¬ 
ping  out  homegrown  programs  for  off- 
the-shelf  software.  But  the  company 
remains  true  to  its  original  IT  blue¬ 
print  for  reusable  services. 

The  benefits  of  migrating  to  off-the- 
shelf  products  include  greater  flexibility 
and  lower  software  maintenance  costs, 
says  Marvin  Rafe,  group  director  and 
chief  architect.  Rafe  has  been  with  New 
York-based  AXA  for  14  years  and,  like 
Buskard,  worked  on  the  original  archi¬ 
tecture  plan.  “Over  time,  the  services 
requirements  really  haven’t  changed 
that  much,  but  the  technology  under¬ 
neath  the  services  has  changed,”  Rafe 
says.  “We’ve  had  to  change  the  technol¬ 
ogy  underneath  three  or  four  times.” 

Continued  on  page  26 


AXA  FINANCIAL’S  BLUEPRINT 
FOR  SOFTWARE  REUSE  SO  FAR 
HAS  YIELDED  $55  MILLION  IN 
SAVINGS.  BY  JULIA  KING 


.NET  2003  gives  you  more  time 
to  do  what  you  do  best.  Think. 


Got  a  big  idea?  Visual  Studio*  .NET  2003 
delivers  a  higher  level  of  productivity,  so 
you  can  turn  that  big  idea  into  reality 
faster  than  you  ever  thought  possible. 
Want  proof?  Merck  &  Co.  Inc.  was  able 
to  create  a  solution  that  accelerated  and 
improved  the  accuracy  of  their  monitoring 
process  in  a  time  frame  barely  imaginable 
before  they  began  using  Visual  Studio 
.NET  2003.  To  read  the  full  story  on  how 
Merck  and  other  companies  are  using 
Visual  Studio  .NET  2003  to  quickly 
turn  their  big  ideas  into  reality,  visit 
msdn.microsoft.com/visual/think 


Visual  Studio 
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Continued  from  page  23 
AXA  started  with  mainframe  technolo¬ 
gy,  then  moved  to  client/server  and  is 
now  Web-based.  Originally,  AXA  used 
IBM’s  SNA  to  provide  communications 
and  common  data  access  to  front-end 
systems  directly  from  the  mainframe. 
In  the  second  phase,  it  eliminated  di¬ 
rect  connections  between  worksta¬ 
tions  and  the  mainframe.  It  also 
switched  from  IBM’s  OS/2  operating 
system  to  Windows  on  its  servers 
and  front-end  PCs.  In  the  third  phase, 
object-oriented  interfaces  based  on 
CORBA  and  TCP/IP  technology  for 
communications  were  key. 

Most  recently,  AXA  brought  in  Mi¬ 
crosoft  Metadirectory  Services  to  syn¬ 
chronize  all  of  its  other  directories  and 
migrated  from  CORBA  to  J2EE  (see 
timeline  below). 

AXA  IT  executives  say  that  in  each 
transition,  the  mainframe  legacy  trans¬ 
actions,  customer  data  and  agent  data, 
which  together  represent  the  biggest 
investment,  have  been  carried  forward. 
“This  services  architecture  allows  us  to 
retain  and  continue  to  leverage  that  in¬ 
vestment  while  the  underlying  technol¬ 
ogy  over  which  we  really  have  no  con¬ 
trol  continues  to  change,”  Rafe  says. 

For  example,  Rafe  notes  that  the 
need  for  a  service  to  aggregate  cus¬ 
tomer  data  across  multiple  accounts 
residing  on  one  or  more  of  AXA’s  eight 
major  computer  systems  remains  the 
same,  regardless  of  whether  an  agent  is 
requesting  it  via  a  voice-response  unit 
or  the  Web. 

AXA’s  eight  major  systems  include 
those  that  it  uses  for  retail  and  whole¬ 
sale  distribution,  sales  applications,  life 
annuity  services,  broker/dealer  sys¬ 
tems,  applications  used  by  AXA’s  fi¬ 
nancial  services  planning  group  and 
client-facing  applications  for  customer 
inquiries  and  self-service  via  the  Web. 


“What  we’ve  done  is  separate  the  ; 
business  intelligence  and  intellectual  j 
capital,  which  is  the  customer  data, 
agent  data  and  the  ability  to  perform  j 
the  transaction  from  the  technology,”  ! 
says  Rafe.  That  way,  AXA  can  take  ad-  j 
vantage  of  new  and  better  technologies  j 
as  they  emerge,  without  interrupting  j 
the  delivery  of  key  services,  he  notes,  j 

A  major  infrastructure  upgrade  com-  j 
pleted  in  2003  from  AXA’s  legacy 
CORBA  environment  to  IBM’s  Web¬ 
Sphere  MQ_message-based  technology  i 
serves  as  a  prime  example.  AXA  want-  j 
ed  a  single  software  product  to  deliver  i 
a  common  way  for  applications  to  ac-  j 
cess  data  in  back-end  systems,  Buskard  j 
explains.  This  approach  even  better 
streamlines  the  integration  of  new  ap-  ; 
plications.  It  also  enables  new  services,  | 
such  as  allowing  users  to  perform  a  full  ; 
complement  of  financial  inquiries  and  ; 
transactions  via  the  Web. 

AXA  chose  WebSphere  MQ_,  Bus¬ 
kard  says,  because  it  was  already  using  | 
IBM  operating  system  software  and 
was  familiar  with  the  product’s  prede-  j 
cessor,  the  MQSeries  middleware. 

The  implementation  wasn’t  a  slam-  i 
dunk  operation,  however.  IBM’s  initial  j 
WebSphere  M C/software  proved  to  be  j 
difficult  for  AXA  developers  to  use, 
which  slowed  AXA’s  time  to  market 
with  new  services,  says  Buskard. 

“Although  [WebSphere]  was  a  very  j 
robust  transport  that  connected  all  of  i 
our  systems,  there  was  a  fairly  complex  j 
syntax.  There  was  a  large  set  of  trans-  i 
actions  with  lots  of  parameters  and 
lots  of  error  messages  to  contend 
with,”  explains  Rafe. 

So  AXA  brought  in  Candle  Corp.’s  j 
PathWAI  application  infrastructure 
management  software,  which  Rafe  de-  j 
scribes  as  a  software  “wrapper”  that 
masks  the  complexity  of  WebSphere.  j 
The  Candle  software  manages  the  mes-  i 


saging  services  that  need  to  take  place 
among  different  AXA  applications  out¬ 
side  of  the  applications  themselves. 

An  advantage  of  this  approach  is  that 
“it’s  a  simpler  form  of  managing  the 
underlying  plumbing  so  that  develop¬ 
ers  aren’t  forced  to  become  familiar 
with  it,”  says  Dave  Caddis,  vice  presi¬ 
dent  of  application  infrastructure  man¬ 
agement  at  El  Segundo,  Calif.-based 
Candle.  “It  also  makes  it  much  easier 
for  the  development  community  to  de¬ 
liver  a  faster  return  on  investment.” 

Integrating  Siebel 

AXA’s  new  Web  portal  is  another  ex¬ 
ample  of  how  the  company  was  able  to 
quickly  incorporate  existing  services 
into  a  new  application.  The  portal, 
which  serves  the  sales  staff,  integrates 
AXA’s  e-business  services  with  Siebel 
Systems  Inc.’s  CRM  software  and 
AXA’s  services-based  architecture.  The 
system  combines  Siebel’s  sales,  market¬ 
ing,  call  center  and  analytical  products 
with  Sun  Microsystems  Inc.’s  Sun  ONE 
Portal  Server.  The  project  took  a  year  to 
complete  and  is  now  being  piloted  by 
about  100  beta  testers. 

“The  value  to  our  sales  advisers  has 
been  huge,  because  they  have  to  have  a 
current  picture  of  customer  relation¬ 
ships,”  says  Dave  Wollin,  AXA’s  group 
director  of  e-business.  “Advisers  now 
log  into  the  portal  in  excess  of  40  times 
a  month.  When  they  started,  it  was  15 
or  16  times  a  month,  but  now  it’s  multi¬ 
ple  times  a  day.” 

Rafe  says  that  one  of  the  primary  rea¬ 
sons  AXA  was  able  to  complete  such  a 
huge  project  in  a  comparatively  short 
period  of  time  was  its  ability  to  take  ar¬ 
chitecture-based  services  such  as  the 
ability  to  aggregate  customer  data 
across  multiple  accounts  and  plug  that 
capability  into  the  Siebel  system,  rather 
than  create  it  again  from  scratch  each 


:  time  a  new  application  is  added. 

;  “A  lot  of  the  same  services  [Wollin] 
i  is  using  on  the  Internet  for  e-business 
i  are  services  we  built  13  years  ago  for 
j  the  PC,”  Rafe  says.  “The  services  layer 
i  hasn’t  changed  that  much,  because 
;  what  the  customer  wants  to  see  hasn’t 
i  changed.  It’s  the  technology  that  con- 
j  nects  in  over  time  that  changes,  and  be- 
j  cause  we’ve  separated  the  services  lev- 
i  el  from  the  technology,  we  have  a  lot  of 
j  flexibility  to  make  those  changes.” 
i  Developing  and  then  actually  adher- 
j  ing  to  an  IT  architecture  centered  on 
j  software  reuse  is  something  that  few 
i  IT  organizations  have  been  able  to  ac- 
j  complish,  especially  over  a  period  of 
i  more  than  10  years,  says  John  Rymer, 

;  an  analyst  at  Forrester  Research  Inc. 

I  “It’s  pretty  unusual,”  Rymer  says.  It’s 
i  also  highly  cost-effective,  given  the 
j  soft  savings  associated  with  software 
i  reuse,  he  adds.  “You  don’t  have  to  re- 
i  train  developers  on  new  interfaces, 

■  and  oftentimes  you  see  higher  quality. 

!  If  you’ve  developed  services  over  10 

j  years,  it’s  pretty  stable  code,  so  you 
i  can  improve  your  performance  over 
;  the  years,”  Rymer  notes, 
j  The  bottom  line  is  that  AXA  has 
i  saved  a  lot  of  money,  says  CIO  Bill 
j  Levine.  “We  spent  about  $35  million  on 
j  our  architecture,  and  we  estimate  it 
j  would  have  cost  us  about  $90  million 
i  to  do  the  same  thing  had  we  not  had  an 
i  architecture  in  place,”  Levine  says, 
j  Reuse  also  guarantees  efficiency  and 
!  minimizes  risk,  he  says.  “In  terms  of  our 
i  ability  to  execute,  we’re  not  fragmented,” 
j  Levine  says.  “We  can  move  developers 
j  from  project  to  project,  and  they’re  not 
j  only  familiar  with  the  tools  used  for  devel- 
j  opment,  but  with  the  services  coming  out 
j  of  it.  The  only  real  variable  we  have  most 

■  of  the  time  are  the  new  interfaces  and  the 
i  application  itself.  We’re  not  always  deal- 
;  ing  with  unproven  services.”  ©  44058 


HOW  AXA’S 

IT  ARCHITECTURE 
EVOLVED 


.  *1989-92 

®  Architectural  focus/objective:  Connectivity 
and  common  data  access;  middleware  to  front- 
end  mainframe. 

ft  Key  technologies:  CICS,  SNA/APPC  LU  6.2 
and  Easel  Corp.'s  CASE  tool.  Front-end  PCs  run 
OS/2  Workstations  communicate  directly  with 

the  mainframe. 

s  Number  of  applications  benefiting  from 

code  reuse:  !1 

*  Estimated  cost  savings:  $10  million 


RELEASE  2  *1993-96 

■  Architectural  focus/objective:  Client/server. 
Focus  on  data  transport,  messaging,  security,  and 
common  customer  and  agent  files  and  directories. 

■  Key  technologies:  Windows  replaces  OS/2. 
TCP/IP  used  for  data  communications  between 
workstations  and  servers.  Server-to-mainframe 
communications  remain  on  IBM’s  SNA. 

AXA  develops  an  enterprise  customer  file,  an 
enterprise  directory  and  an  agent  file.  It  also  intro¬ 
duces  a  proprietary  application  security  system 
for  authentication  and  authorization. 

■  Number  of  applications  benefiting  from 
code  reuse:  Five 

■  Estimated  cost  savings:  $8  million 


RELEASE  3  *1997-2001 

■  Architectural  focus/objective:  Web  and 

open  systems. 

■  Key  technologies:  CORBA,  Iona  Technolo¬ 
gies  Ltd.’s  Orbix  product.  Web  application  server 
software  from  Sun  Microsystems’  NetDynamics. 
Also  deploys  Solaris  and  Sun  ONE  Directory 
Server,  Sun  ONE  Portal  Server  and  Sun  Web¬ 
server.  The  PC  browser  software  is  Netscape. 
IBM’s  MQSeries  middleware  (subsequently  re¬ 
branded  WebSphere  MQ);  Candle’s  Roma  soft¬ 
ware  (now  PathWAI). 

■  Number  of  applications  benefiting  from 
code  reuse:  14 

■  Estimated  cost  savings:  $37  million 


RELEASE  4*  2002-Present 

■  Architectural  focus/objective:  Deploying 
vendor-provided,  standards-based  products. 

■  Key  technologies:  J2EE,  IBM’s  WebSphere 
MQ,  Microsoft  Metadirectory  Services,  BEA’s 
WebLogic  Server,  Oblix  Inc.’s  NetPoint  software 
for  centralized  security,  Siebel’s  CRM  applica¬ 
tions.  Also  IBM’s  DB2-based  Client  Information 
Integration  Solution  to  replace  its  proprietary 
customer  file  system. 

■  Number  of  applications  benefiting  from 
code  reuse:  Five 

■  Estimated  cost  savings:  To  be  determined 


A  NETWORK  OUTAGE  THREATENS 
TO  SHUT  DOWN  GLOBAL  DISTRIBUTION 


THE  IT  STAFF  HAS  2  HOURS  TO  FIND 
AND  FIX  THE  PROBLEM. 


CAN  YOUR  SOFTWARE  KEEP  BUSINESS  FROM  DISAPPEARING? 


Business  Service  Management  solutions  from 
BMC  Software"  can.  In  fact,  they  let  you  predict 
critical  performance  problems  and  resolve  them 
before  they  ever  impact  your  business.  And  you 
can  prioritize  IT  management,  investments  and 
resource  allocations  to  optimize  your  business 
performance.  So  you  can  solidly  align  your  IT 
investments  with  strategic  business  goals. 


And  protect  the  delivery  of  vital  business  services 
like  sales,  customer  service,  online  transactions, 
logistics  and  distribution — whatever  is  most 
critical  to  your  company's  success.  It's  enterprise 
management  software  that  works  with  your  existing 
IT  resources  to  let  you  manage  what  matters  from 
a  business  perspective  and  execute  with  precision. 
Find  out  how  at  www.bmc.com/bsm51 
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Data  Ready  To  Go 

Sybase  Data  Management  solutions 
deliver  the  data  agility  that  makes 
field  force  automation  possible.  Real 
results.  Real  ROI.  Real  fast. 
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Discover  how  Britannia  Airways 

saved  over  one  million  dollars 
and  improved  staff  management 
processes  with  Sybase,  the 
world’s  number  one  provider 
of  mot  le  middleware? 


The  Enterprise.  Unwired 

For  our  Britannia  Airways  case  study  visit: 

www.sybase.co  m/ffa 


Security  Everywhere 

For  real-time  transactions,  nothing 
is  better  or  more  secure  than  Sybase 
SQL  Anywhere,  the  world's  leading 
mobile  data  management  and 
synchronization  solution. 


Extend  Your  Reach 

Sybase  M-Business  Anywhere"  lets 
you  mobilize  the  apps  you  already 
have  so  you  can  reap  more  value  from 
your  current  technology  investments. 
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Cost  and  interoperability  problems  are  slowing  companies’ 
adoption  of  smart  card  technology.  BY  JAIKUMAR  VI JAYAN 


Employees  at  Post  &  Schell  PC,  a  law 

firm  in  Philadelphia,  need  smart  cards  to 
do  just  about  everything,  from  entering 
company  facilities  and  using  elevators  to 
securing  two-factor  authentication  so 
they  can  access  IT  applications. 

The  firm  recently  started  using  smart 
cards  as  part  of  a  move  to  bolster  network  and  physi¬ 
cal  defenses  when  it  relocated  to  a  new  facility. 

“The  big  ROI  we  are  providing  our  firm,  our  attor¬ 
neys  and  our  clients  is  greater  security,”  says  Lou 
Mazzio,  Post  &  Schell’s  chief  technology  officer. 

Like  Mazzio,  other  users  who  have  deployed  smart 
cards  say  that  the  technology  helps  improve  security, 
reduce  password  administration  and  support  costs, 
and  enable  single  sign-on  to  multiple  applications. 

But  the  upfront  cost  of  a  smart  card  infrastructure, 
as  well  as  interoperability  problems  and  the  hassles 
involved  in  integrating  the  technology  with  existing 
infrastructures,  has  resulted  in  far  slower  deploy¬ 
ment  of  the  technology  in  corporate  America  than 
many  had  once  predicted. 

“The  corporate  market  has  been  a  tough  nut  to 
crack,”  says  Thierry  Burgess,  executive  vice  presi¬ 
dent  of  sales  at  Oberthur  Card  Systems  USA,  the 
U.S.  arm  of  one  of  the  largest  smart  card  vendors  in 
the  world. 

Like  public-key  infrastructure  (PKI),  smart  card 
technology  is  taking  many  years  to  gain  widespread 
acceptance  in  private  commercial  enterprises,  says 
Trent  Henry,  an  analyst  at  Burton  Group  in  Midvale, 
Utah.  But  expect  to  see  greater  adoption  over  the 
next  few  years,  he  adds. 

Smart  cards  allow  companies  to  store  passwords, 
personal  identification  numbers  and  other  digital 
credentials  that  let  users  log  onto  corporate  net¬ 
works  or  access  facilities  such  as  buildings  and 
parking  lots. 

In  Post  &  Schell’s  case,  user  authentication  infor¬ 
mation  is  stored  on  smart  cards  for  network  access 
using  RSA  Security  Inc.’s  Smart  Badging  system. 
Bedford,  Mass.-based  RSA  is  also  helping  the  firm 
embed  user  credential  information  on  the  same 
cards.  That  information  is  needed  for  physical  access 
to  Post  &  Schell  facilities. 

More  Features,  More  Savings 

The  two-factor  authentication  enabled  by  such 
cards  allows  for  better  network  and  physical 
security,  says  Charles  Fletcher,  CIO  and  provost  at 
Delaware  State  University  in  Dover.  Smart  cards  can 
also  help  reduce  some  of  the  traditional  costs  asso¬ 
ciated  with  password  resets  and  management  be¬ 
cause  the  passwords  are  embedded  directly  on  the 
cards,  he  says. 

Generally,  the  cost  benefits  increase  as  more  ac¬ 
cess  functions  are  integrated  on  a  card,  Fletcher  says. 

Students  and  employees  at  the  university  have 
been  using  smart  cards  since  last  summer  to  log  into 
Windows  and  Web-based  applications,  access  dorm 
rooms  and  library  facilities,  and  pay  for  meals  in  the 
cafeteria.  In  the  future,  the  university  plans  to  use 
the  smart  card  infrastructure,  which  is  based  on 
HiPath  SIcurity  Card  technology  and  the  HiPath 
MetaDirectory  software  suite  from  Siemens  AG  in 
Munich,  to  enable  access  to  e-commerce  and  pay¬ 
ment  applications,  Fletcher  says. 
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Burton  Group  recently  surveyed  :  me  of  its  clients 
that  have  deployed  smart  cards  and  compiled  the 
following  list  of  lessons  learned. 

Developing  proper  processes  is  often  harder 
than  deploying  the  actual  technology.  Take  into 
account  political  challenges  and  the  need  for 
executive  sponsorship. 


Planning  ahead  is  crucial. 

Be  prepared  to  customize  he  smart  card  tech’ 
rtology  you  choose. 


Stick  t  idards. 

Avoid  proprietary  implementations. 


From  a  physical  standpoint,  the  embedded  read/ 
write  intelligence  in  such  cards  allows  access  to  be 
quickly  granted,  revoked  or  modified  from  a  central 
location,  says  Neville  Pattison,  director  of  smart  card 
technologies  at  Paris-based  Axalto,  which  was  re¬ 
cently  spun  off  as  an  independent  company  from  oil 
field  services  giant  Schlumberger  Ltd. 

Schlumberger  is  rolling  out  Axalto’s  DexaBadge 
smart  card  technology  to  its  80,000  employees 
worldwide.  The  cards  are  being  used  to  digitally  en¬ 
crypt  e-mail  and  sign  electronic  documents.  Schlum¬ 
berger  is  also  using  the  cards  to  enable  log-in  to  Win¬ 
dows  applications  and  virtual  private  network  ser¬ 
vices,  Pattison  says. 

“The  smart  card  is  the  little  agent  of  trust  in  the 
hands  of  an  employee,”  Pattison  says.  “On  behalf  of 
the  issuer,  it  performs  security-related  operations 
and  various  other  operations  knowing  the  right  card¬ 
holder  is  present.” 

However,  several  factors  have  contributed  to  the 
slow  adoption  of  smart  cards  in  corporations,  Burton 
Group’s  Henry  says. 

Cost  is  a  big  one.  The  price  tag  for  deploying  the 
hardware,  readers,  middleware  and  software  for  a 
smart  card  system  can  be  daunting.  Midsize  compa¬ 
nies  can  easily  expect  to  spend  $200,000  to  $300,000 
to  get  started,  and  even  pilots  cost  about  $70,000, 
says  Chris  Meaney,  director  of  secure  networks  at 
Siemens.  On  average,  companies  can  expect  to  pay 
$20  to  $30  per  user,  excluding  the  cost  of  the  readers, 
card  management  and  PKI  software,  according  to 
Burton  Group. 

As  a  result,  smart  cards  are  unlikely  to  make  a 
whole  lot  of  sense  for  companies  with  fewer  than 
2,000  employees,  Meaney  says. 

Companies  also  need  to  have  a  PKI  in  place  to  use 
the  encryption,  electronic  signing  and  nonrepudia¬ 
tion  functions  that  are  enabled  by  smart  cards,  says 
Henry.  “There  definitely  is  some  serious  cost-benefit 
analysis  that  needs  to  be  done  before  companies 
start  deploying  smart  cards,”  he  says. 

Technology  interoperability  is  another  big  chal¬ 
lenge,  says  Mary  Dixon,  director  of  the  U.S.  Depart¬ 
ment  of  Defense’s  Common  Access  Card  program 
office,  which  is  rolling  out  more  than  4  million  smart 
cards  to  Pentagon  personnel  (see  box,  right). 

Smart  card  infrastructures  require  a  high  degree  of 


interoperability  and  synchronization  among  the 
cards,  readers,  access-control  panels  and  identity 
directories,  and  that  interoperability  is  still  not  fully 
there,  Dixon  says.  The  cards  themselves  come  with 
varying  memory  sizes,  processing  capacities,  scala¬ 
bility,  operational  proximity  ranges  and  application 
support.  And  applications  that  are  enabled  to  work 
with  one  vendor’s  smart  card  technologies  may 
not  always  seamlessly  work  with  another  vendor’s 
products. 

Because  of  the  size  and  scope  of  its  project,  the 
DOD  decided  to  contract  out  its  work  to  multiple 
technology  vendors  to  minimize  the  risk  of  technolo¬ 
gy  lock-in,  Dixon  says.  But  to  ensure  that  smart 
cards,  middleware  and  readers  from  multiple  ven¬ 
dors  integrated  seamlessly,  the  DOD  worked  with 
the  National  Institute  of  Standards  and  Technology 
to  develop  an  interoperability  specification  that  par¬ 
ticipating  vendors  had  to  adhere  to. 

However,  because  of  integration  issues,  “if  I  was 
going  to  do  a  small  implementation  of  a  few  thousand 
cards,  I  would  be  inclined  to  go  with  a  single  vendor’s 
card  and  use  it  as  much  as  I  could,”  Dixon  says. 

Integration  Challenges 

Until  recently,  users  have  also  needed  to  do  consid¬ 
erable  integration  work  to  tie  smart  card  manage¬ 
ment  systems  into  PKI  networks,  says  Oberthur 
Card’s  Burgess. 

Companies  also  need  to  have  a  centralized  directo¬ 
ry  infrastructure  in  place,  says  Meaney.  And  they 
need  to  have  a  good  process  for  communicating 
changes  in  the  core  human  resources  database, 
which  is  often  the  source  of  identity  information,  he 
says.  That  information  is  needed  to  provision,  revoke 
or  modify  cards  when  employees  are  hired,  move  to 
new  departments  or  leave  the  company. 


The  recent  trend  toward  so-called  smart  tokens 
that  can  plug  into  standard  Universal  Serial  Bus 
ports  on  computers  could  also  divert  attention  away 
from  traditional  smart  cards.  Herndon,  Va.-based  Ex¬ 
ostar  LLC,  an  online  trading  exchange  created  by 
companies  such  as  The  Boeing  Co.,  Raytheon  Co. 
and  Lockheed  Martin  Corp.,  is  using  smart  tokens 
from  Aladdin  Knowledge  Systems  Ltd.  in  Chicago. 
The  tokens  allow  Exostar  to  store  digital  certificates 
and  automatically  fill  in  log-on  fields,  passwords  and 
Web  site  shortcuts,  as  well  as  encrypt  and  decrypt 
files  and  e-mails,  without  requiring  an  investment  in 
a  special  card  reader,  says  Jeff  Nigriny,  Exostar’s  chief 
security  officer. 

But  there  are  some  factors  coming  together  that 
could  finally  begin  to  spur  broader  corporate  adop¬ 
tion,  says  Herb  Mehlhorn,  senior  product  manager 
for  RSA’s  smart  card  business. 

New-generation  smart  card  technologies  based  on 
a  set  of  Java  standards  promise  more  interoperability 
and  functionality,  Mehlhorn  says. 

Massive  smart  card  deployments  by  federal  agen¬ 
cies  such  as  the  Defense  Department  and  the  Depart¬ 
ment  of  Transportation  have  begun  pushing  technol¬ 
ogy  costs  lower,  he  says.  And  companies  are  coming 
under  increasing  regulatory  and  legal  pressure  to 
demonstrate  due  diligence  when  it  comes  to  user 
authentication. 

The  embedded  PKI  certificate  server  support  in 
Microsoft  Corp.’s  Windows  Server  2003  could  also 
begin  to  make  it  easier  for  users  to  snap  smart  cards 
into  PKI  networks,  Henry  says. 

“I  don’t  think  there’s  anyone  that  refutes  the  likeli¬ 
hood  that  smart  cards  will  be  in  every  wallet  10  years 
from  now,”  says  Pete  Lindstrom,  an  analyst  at  Spire 
Security  LLC  in  Malvern,  Pa.  “It’s  how  we  get  there 
that’s  going  to  be  interesting.”  ©  44310 


LEADS  THE  WAY 


THE  DEFENSE  DEPARTMENTS  Common  Access 
Card  (CAC)  program,  through  which  smart  cards  will 
be  issued  to  more  than  4  million  military  personnel, 
civilian  DOD  employees  and  contractors,  is  the  largest 
smart  card  project  currently  under  way. 

When  fully  deployed  next  month,  the  32KB  chip- 
based  cards  that  incorporate  Java  technology  will 
serve  as  military  ID  cards  and  provide  access  to  physi¬ 
cal  facilities  and  government  networks,  says 
Mary  Dixon,  director  of  the  CAC  program  of¬ 
fice,  Apart  from  the  standard  credential  in¬ 
formation.  each  ID  card  has  up  to  7KB  of 
space  reserved  for  use  by  military  services 
as  needed,  for  functions  such  as  tracking 
troop  deployment  readiness  or  paying  for 
food  at  the  commissary. 

The  card  infrastructure  is  based  on  tech¬ 
nology  from  Axalto  and  Oberthur  Card  Sys¬ 
tems,  and  has  been  a  crucial  enabler  of  the 
Pentagon's  e-business  initiatives,  including 


the  use  of  digital  signatures  for  electronic  documents. 
Dixon  says. 

So  far,  about  3.5  million  cards  have  been  deployed 
at  a  rate  of  more  than  10,000  cards  a  day  from  900 
centers  worldwide.  Dixon  says. 

The  DOD  effort  has  been  a  big  catalyst  for  the  smart 
card  industry,  says  Randy  Vanderhoof,  executive  di¬ 
rector  of  the  Smart  Card  Alliance,  a  nonprofit  industry 
association  in  Princeton,  N.  J. 

“There  has  been  a  significant  increase  in 
the  shipment  of  smart  cards  to  corporate  and 
government  programs  in  the  last  three 
years,"  Vanderhoof  says.  “The  most  visible 
has  been  the  DOD  effort."  But  in  the  future, 
expect  to  see  similar  initiatives  from  other 
agencies,  including  the  Department  of 
Homeland  Security  and  the  Transportation 
Security  Agency,  which  is  expected  to  roll  out 
10  million  cards.  Vanderhoof  says. 

-  Jaikumar  Vijayan 
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USHING 
TOWARD 
CHAOS 

Futurist  says  IT  is  in  for  bumpy  ride  on  the  way 
to  the  ‘adaptive  enterprise.’  By  Gary  H.  Anthes 


From  1995  through  2002, 
Christopher  Meyer  was  di¬ 
rector  of  the  Center  for 
Business  Innovation,  a 
think  tank  within  Cap 
Gemini  Ernst  &  Young. 
While  there,  he  founded 
Bios  Group  Inc.,  a  Santa 
Fe,  NM.-based  venture 
that  invests  in  business 
applications  of  complexity  theory. 

In  2002,  he  founded  Nerve  in  Lexing¬ 
ton,  Mass.,  where  he’s  now  applying 
adaptive  systems  theory  to  understand 
how  businesses  can  evolve  autonomous¬ 
ly  in  response  to  economic  volatility. 

He’s  also  researching  the  coming  “mole¬ 
cular  economy,”  to  be  driven  by  - 

the  rapidly  developing  fields  of 
nanotechnology,  biotechnology 
and  materials  science. 

With  Stan  Davis,  he  has  co-  _ 

authored  three  books,  most  re¬ 
cently  It’s  Alive  (Crown  Business,  2003). 
Computerworld’s  Gary  H.  Anthes  re¬ 
cently  asked  Meyer  about  some  of  the 
concepts  in  the  book,  which  looks  10 
years  into  the  future. 

What  does  the  maturing  of  IT  plus  the  rise  of 
the  so-called  adaptive  enterprise  imply  for  IT 
people?  Aim  as  high  in  the  value  chain 
as  you  can.  If  IT  is  what  you  love,  look 
at  the  world  of  autonomous  agents,  of 
pattern  recognition,  of  globally  distrib¬ 
uted  decision  systems,  where  the  next 
killer  apps  can  come  from.  The  eco¬ 
nomic  value  of  the  day-to-day  IT  jobs 
is  going  to  decline  and  perhaps  go 
overseas. 

You  cite  companies  such  as  John  Deere,  IBM 


FUTURE 

WATCH® 


and  General  Electric  as  using  genetic  algo¬ 
rithms  (GA),  in  which  rules  in  software 
evolve  spontaneously,  breeding  better  and 
better  solutions.  How  important  is  that  con¬ 
cept?  It’s  the  leading  end  of  a  wedge. 
GAs  are  one  of  a  number  of  techniques 
under  the  category  of  nondeterminis- 
tic  programming,  where  the  objective 
is  not  to  create  code  that  never  has  a 
bug  and  gives  you  the  same  answer 
every  time,  but  to  solve  problems  that, 
in  some  cases,  may  be  impossible  for 
us  to  understand  because  they  are  non¬ 
linear  and  nondeterministic. 

In  some  cases,  if  you  run  it  twice, 
you  won’t  get  the  same  answer,  but  you 
might  get  equally  good  answers.  The 

-  application  of  GAs  is  a  pretty 

scarce  skill. 


What  about  agent-based  simula- 

_  tions,  another  nondeterministic 

computing  technique  that  your 
book  says  is  used  by  Southwest  Airlines,  the 
U.S.  Marines,  Walt  Disney  and  a  few  other 
organizations?  It’s  so  far  used  by  a  hand¬ 
ful  of  people  in  very  customized  ways. 
It  will  have  a  profound  impact  on  the 
social  sciences.  It’s  the  right  way  to 
model  systems  of  people,  of  consumer 
behavior,  for  example.  The  technique 
is  pioneering  today,  but  it’s  good 
enough  that  it’s  worth  investigating, 
because  it’s  a  small  expenditure  for 
something  that  may  yield  new  insights. 

Will  we  see  these  techniques  appear  in  com¬ 
mercial  supply  chain  packages?  Yes,  I 
know  that  [i2  Technologies  and  SAP] 
have  been  working  on  some  of  these 
ideas.  One  of  the  major  competitive 
battle  fronts  will  be  making  these 


packages  more  adaptive  to  real-time 
operations  conditions. 

In  supply  chains,  things  take  a  num¬ 
ber  of  days  to  move  from  one  place  to 
another,  but  during  that  time,  it  may  be 
that  the  highest  and  best  use  of  some¬ 
thing  has  changed,  and  so  its  destina¬ 
tion  should  change.  So,  how  do  you 
build  into  your  management  of  re¬ 
sources  this  real-time,  sense-and-re- 
spond  capability?  It’s  real-time  supply 
chain  optimization,  as  opposed  to  opti¬ 
mization  within  a  previously  fixed  set 
of  rules. 

You  mention  real-time  pricing  as  one  specific 
application  of  these  nondeterministic  tech¬ 
niques.  Yes,  the  ability  to  say,  for  exam¬ 
ple,  “This  car  ought  to  be  priced  over 
sticker  and  this  model  ought  to  be 
deeply  discounted  based  on  what’s  on 
the  lot”  is  an  example  of  a  capability 
that’s  going  to  go  into  the  big  packages. 
In  order  to  support  that  kind  of  thing, 
IT  people  will  have  to  look  at  informa¬ 
tion  as  a  data  stream  about  the  world, 
not  just  as  transactions. 

You  say  that  much  of  this  data  stream  will 
come  from  sensors,  which  will  become 
cheap  and  ubiquitous  as  a  result  of  the  revo¬ 
lution  in  molecular  sciences.  That  means 
there’s  going  to  be  a  lot  of  data  avail¬ 
able  that  didn’t  used  to  be.  So  an  IT 
group  that’s  really  trying  to  help  will 
go  to  its  management  and  say,  “What 
information  could  you  use  to  create 


value?”  and,  “We’ll  think  about  how  to 
get  that  information  in  real  time.”  Cus¬ 
tomer  behavior  is  a  key  one. 

What  challenges  does  this  pose  for  IT?  If 

you  take  [the  principles  of]  sense  and 
respond,  and  learn  and  adapt  seriously, 
you’re  going  to  have  to  use  technolo¬ 
gies  that  handle  vast  data  streams.  For 
many  organizations,  that  will  be  a  new 
challenge. 

You  say  companies  and  their  IT  shops  should 
“operate  at  the  edge  of  chaos.”  How  can  that 
be  a  good  thing?  If  you  believe  competi¬ 
tive  advantage  lies  in  the  ability  to 
sense  change  in  the  environment  and 
respond  to  it  faster  than  anyone  else, 
and  thereby  keep  your  opponents  off 
balance  even  though  you  feel  off  bal¬ 
ance  because  you  are  operating  as  fast 
as  you  can,  then  IT  can  create  compet¬ 
itive  advantage  by  being  able  to  go 
through  the  orient-observe-decide-act 
cycle  faster. 

Might  such  rapid  change  jeopardize  ITs  core 
mission?  The  IT  group  can’t  view  its 
mission  as  tending  to  the  existing  IT 
infrastructure  anymore,  keeping  it  at 
99.99%  available  and  all  that.  Out¬ 
source  the  commoditized  IT  stuff,  and 
be  in  the  business  of  having  the  fastest 
change  capability  in  the  industry.  The 
stuff  that  stays  in-house  will  be  some¬ 
what  chaotic,  and  it  should  be. 

©  44273 


According  to  Meyer’s  It's  Alive,  economies  follow  predictable  evolutions  through  four  stages.  Hie 
U.S.  IT  economy  is  nearing  the  end  of  its  rapid-growth  phase  and  will,  over  the  next  10  years,  be 
eclipsed  by  rapid  advances  in  nanotechnology  and  biotechnology.  Advanced  applications  of  IT 
will  center  on  the  “adaptive  enterprise,”  with  companies  evolving  in  ways  that  resemble  biological 
systems.  IT  itself  must  become  similarly  adaptive  and  will  do  so  by  employing  nascent  technologies 
-  such  as  genetic  programming  and  simulation  based  on  autonomous  agents  -  inspired  by  biology. 
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Postmerger  Audit 
QuashesTrust  Idea 


The  barriers  stay  up  when  a  security  audit 
reveals  inadequate  protections  within  a  newly 
acquired  start-up.  By  Mathias  Thurman 


During  the  past  few 
weeks,  almost  all  of 
my  time  has  been  de¬ 
voted  to  creating  secu¬ 
rity  standards  in  order  to  com¬ 
ply  with  the  requirements  of 
the  Sarbanes-Oxley  Act.  That 
changed  this  week  after  a  sud¬ 
den  acquisition  led  to  a  fran¬ 
tic,  last-minute  security  audit. 

Prior  to  this  interruption,  I 
had  made  quite  a  bit  of 
progress.  My  stan¬ 
dards  document  is 
now  up  to  about  70 
pages.  I’ve  tried  to 
keep  it  short  and 
sweet,  but  it’s  difficult 
to  do  that  and  be  com¬ 
prehensive.  The  hard¬ 
est  aspect  of  creating  robust 
security  standards  is  ensuring 
that  they’re  meaningful.  Sure, 

I  can  do  research  and  create  a 
document.  But  the  resulting 
policy  may  not  be  applicable 
to  my  company’s  way  of  doing 
business  or  to  the  way  it  de¬ 
ploys  a  particular  technology. 

To  ensure  that  my  standards 
are  relevant,  I’ll  have  to  meet 
with  each  group  to  which  each 
standard  applies,  review  what 
the  group  is  doing  and  com¬ 
pare  that  with  my  best  prac¬ 
tices.  Then  I’ll  have  to  change 
my  standards  to  balance  the 
company’s  security  needs  with 
what  each  department  is  do¬ 
ing.  If  I  create  a  standard  that 
forces  a  group  to  change  how 
it  conducts  business,  users 
simply  won’t  comply. 

But  ali  this  went  on  the  back 
burner  today  when  my  compa¬ 
ny  announced  the  acquisition. 
The  IT  security  group  was 
given  just  three  days  to  com¬ 
plete  a  merger-and-acquisition 
due-diligence  report  —  far 
short  of  the  two  to  three 
weeks  we  usually  have  to 


complete  such  an  assessment. 
Luckily,  the  company  we’re  ac¬ 
quiring  has  fewer  than  40  em¬ 
ployees  and  only  one  office. 

When  we  acquire  a  compa¬ 
ny,  we  need  to  understand  the 
security  controls  around  what 
we’re  acquiring,  whether  it’s 
people,  a  product  or  a  customer 
base.  We  can’t  just  assume  that 
the  company  is  doing  business 
in  a  secure  manner  —  espe¬ 
cially  since  this  one 
is  a  start-up.  We  also 
need  to  identify  se¬ 
curity  issues  quickly. 

I  was  once  in  a  sit¬ 
uation  where  an  em¬ 
ployee  of  an  ac¬ 
quired  company, 
fearing  a  layoff,  copied  the  en¬ 
tire  customer  database,  com¬ 
pressed  it  and  stored  it  on  a 
Universal  Serial  Bus  flash 
memory  disk.  Fortunately,  he 
then  forgot  the  disk  in  a  con¬ 
ference  room.  We  discovered 
the  data  only  when  someone 
decided  to  plug  the  device 
into  his  USB  port  to  figure  out 
who  owned  it.  The  staffer, 
who  ironically  hadn’t  been 
targeted  for  a  layoff,  was  let 
go  after  we  found  him  roam¬ 
ing  the  halls  asking  if  anyone 


The  IT  security  group 
was  given  just  three 
days  to  complete  a 
merger-and-acquisi- 
tion  due-diligence 
report -far  short  of 
the  two  to  three  weeks 
we  usually  have. 


had  seen  his  USB  disk. 

For  this  acquisition,  we’re 
interested  in  the  company’s 
software.  In  this  case,  the 
critical  intellectual  property 
is  source  code  located  on  a 
server  cluster. 

Building  Trust 

Since  I  had  just  a  few  days  to 
complete  my  assessment,  I  de¬ 
cided  to  focus  on  the  most 
critical  areas.  I  wanted  to  en¬ 
sure  that  once  we  had  estab¬ 
lished  a  trust  relationship  be¬ 
tween  our  company’s  servers 
and  theirs,  we  wouldn’t  be  in¬ 
troducing  any  vulnerabilities 
into  our  environment.  We 
planned  to  link  the  two  com¬ 
pany  domains  so  that  new  em¬ 
ployees  could  access  our  hu¬ 
man  resources,  payroll,  e-mail, 
shared  drives  and  other  in¬ 
tranet  resources.  Usually,  if 
my  group  can  identify  threats 
or  other  security  issues,  we 
can  mitigate  those  prior  to  set¬ 
ting  up  that  trust. 

I  began  by  requesting  a  net¬ 
work  diagram  so  I  could  under¬ 
stand  the  network  topology. 
The  other  company  has  a  so- 
called  DMZ,  or  demilitarized 
zone,  in  which  its  e-mail  gate¬ 
way,  domain  name  server,  Web 
server  and  file  transfer  protocol 
server  sit.  The  back-end  tier 
includes  the  corporate  LAN, 
engineering  lab,  and  financial 
and  human  resources  systems. 
It  also  has  a  few  firewalls,  a  vir¬ 
tual  private  network  gateway, 
routers,  switches,  and  Solaris, 
Linux  and  Windows  servers. 

I  then  turned  my  attention 
to  the  router  configurations, 
firewall  rules  database  and 
VPN  gateway  configuration.  I 
needed  to  know  how  data 
flowed  from  one  network  to 
another,  any  external  connec¬ 
tions  with  other  third-party 
entities  and  who  was  access¬ 
ing  the  network  remotely.  I 
created  a  spreadsheet  in 
which  I  annotated  all  of  the 
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trust  relationships  and  net¬ 
work  flows.  Since  I  had  little 
time  to  complete  my  review,  I 
focused  on  the  DMZ  and  a 
sampling  of  the  corporate  net¬ 
work  configurations. 

To  supplement  my  map,  I 
ran  a  discovery  of  the  network 
using  Nmap  (w ww.insecure. 
org),  a  freely  available  port 
scanner.  Nmap  does  a  good 
job  of  enumerating  hosts  and 
identifying  the  operating  sys¬ 
tem.  I  also  ran  Nessus  (www. 
nessus.org),  another  free  appli¬ 
cation,  to  assess  vulnerability. 

Meanwhile,  I  toured  the  fa¬ 
cility,  asked  plenty  of  ques¬ 
tions  and  noted  any  unlocked 
doors,  faulty  alarm  systems, 
lack  of  access  control  and  so 
on.  Then  I  then  sat  down  with 
the  primary  network  and 
systems  engineer  and  went 
through  a  comprehensive 
questionnaire.  This  document, 
assembled  over  the  past  few 
years,  covers  areas  such  as  the 
policies  and  procedures  used 
in  conducting  business. 

The  end  result  was  fairly 
dismal.  That’s  understandable 
—  many  start-ups  focus  on 
their  products  and  lack  the  re¬ 
sources  to  properly  secure 
their  IT  infrastructures.  As  a 
result  of  my  preliminary  re¬ 
view,  we’ve  already  decided  to 
forget  about  establishing  a 
trust  between  organizations. 
We’ll  shut  down  all  external 
access  to  the  company’s  net¬ 
work  for  now  and  just  create  a 
point-to-point  VPN  tunnel  be¬ 
tween  the  companies.  This 
should  get  us  by  for  the  next 
two  weeks.  After  that,  well 
move  everyone  into  our  cor¬ 
porate  campus. 

Although  well  keep  the  ac¬ 
quired  company’s  staff  and 
source  code,  well  abandon  or 
recycle  virtually  all  of  its  net¬ 
work  equipment  and  other 
hardware.  After  I  finish  my  re¬ 
port,  it’s  back  to  the  Sarbanes- 
Oxley  grind.  # 

WHAT  DO  YOU  THINK? 

This  week's  journal  is  written  by  a  real  securi¬ 
ty  manager,  “Mathias  Thurman,"  whose 
name  and  employer  have  been  disguised  for 
obvious  reasons.  Contact  him  at  mathias_ 
thurman@yahoo.com,  or  join  the  discussion 
in  our  forum.  QuickLimk  a159Q 

To  find  a  complete  archive  of  our 
Security  Manager's  Journals,  go  online  to 
©  computerworld.com/secjournal 
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Security  Bookshelf 

Designing  Network  Security, 
Second  Edition,  by 
MerikeKaeo;  Cisco 
Press,  2003. 


Security  profession¬ 
als  responsible  for 
issuing  recommen¬ 
dations  during  a  net¬ 
work  design  or  for 
conducting  a  security  audit  on 
an  existing  network  will  bene¬ 
fit  from  this  comprehensive 
800-page  tome.  I  found  the  in¬ 
formation  presented  particu¬ 
larly  useful  during  a  recent 
router  audit. 

For  example,  Kaeo  offers 
many  sample  configurations 
that  include  appropriate  com¬ 
ments  to  help  readers  under¬ 
stand  why  a  particular  config¬ 
uration  statement  is  needed. 
He  also  does  a  good  fob  cover¬ 
ing  current  threats,  incident 
response  and  policy  issues. 

There’s  one  potential  draw¬ 
back,  however;  This  book 
focuses  primarily  on  Cisco 
gear,  so  users  of  other  equip¬ 
ment  brands  may  want  to  look 
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All-in-0ne  Security 
Appliance  Debuts 

WatchGuard  Technologies 
Inc.  in  Seattle  has  launched 
Firebox  X,  a  Sine  of  expandable 
multifunction  security  appli¬ 
ances  based  on  Intel  technol¬ 
ogy  that  combines  firewall, 
VPN,  application-layer  securi¬ 
ty,  intrusion  prevention,  au¬ 
thentication,  and  spam  and 
Web  filtering  inasinglelUen- 
cteuro.aUequaSs1.75in. 
high.) 

The  appliance  can  be  ex- 


by  purchasing  a  software  key 
to  turn  on  functions  prebuiit 
into  the  box.  WatchGuard  says 
it  plans  to  add  support  for  Se¬ 
cure  Sockets  Layer  accelera- 
worn,  weo  services  sscurny 
and  a  Web-based  user  inter¬ 
face  in  a  future  release.  The 
Firebox  X  comes  in  f 
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Fujitsu  Releases 
New  Blade  Server 

Fujitsu  Computer  Systems  Corp. 
has  released  the  Primergy  BX300 
blade  server.  Featuring  Intel  Pen¬ 
tium  M  1.6-GHz  processors  and 
up  to  4GB  of  ECC-protected  dou¬ 
ble  data  rate  synchronous  dynam¬ 
ic  RAM.  the  BX300  usesa3U- 
high  (1U  is  1.75  in.),  19-in.  rack 
that  can  hold  20  server  blades, 
said  Sunnyvale,  Calif.-based  Fuji¬ 
tsu.  The  BX300,  which  supports 
Linux  or  Windows  Server  2003, 
starts  at  $6,500. 


Tripwire  Net  Config 
Manager  Upgraded 

Tripwire  Inc.  has  announced  Trip¬ 
wire  for  Network  Devices  3.0, 
network  configuration  manage¬ 
ment  software  that’s  designed  to 
manage,  monitor  and  report 
changes  to  network  devices.  It 
can  handle  100,000  devices  and 
is  capable  of  identifying  devices 
with  configurations  different  from 
established  policies,  according  to 
Portland,  Ore.-based  Tripwire. 
Pricing  for  100  nodes  is  $19,900. 


Emulex  Announces 
Fibre  Channel  HBA 

Emulex  Corp.  this  week  an¬ 
nounced  the  Emulex  LightPulse 
LP101  HBA.  The  Costa  Mesa, 
Calif.-based  vendor  said  the 
LP101  delivers  Fibre  Channel 
connectivity  at  about  half  the  list 
price  of  existing  Fibre  Channel 
host  bus  adapters. 


SMC  Launches 
WLAN  Antenna 

SMC  Networks  Inc.  last  week  in¬ 
troduced  an  antenna  designed  to 
extend  the  range  of  corporate 
wireless  LANs  operating  in  the 
2.4-GHz  band.  The  SMCANT- 
DIFP11  high-gain  antenna  can  be 
hooked  up  to  any  802.11b  WLAN 
access  point  or  router  and  ex¬ 
tends  the  range  in  point-to-point 
operation  by  as  much  as  nine 
miles,  according  to  Irvine,  Calif.- 
based  SMC.  ft  will  be  available  in 
March  for  $69.99. 
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Sun  Refuses  to 
Be  Eclipsed 


ECLIPSE  is  an  enormously  popular  Java-based 
integrated  development  environment  (IDE). 
IBM  started  work  on  Eclipse  software  in 
1999,  and  Eclipse  1.0  premiered  in  October 
2001.  It  soon  developed  a  life  of  its  own  as  a 
project  driven  by  the  open-source  community. 


Last  week  an  IBM-led 
consortium  officially  spun 
off  Eclipse  as  an  indepen¬ 
dently  controlled  open- 
source  project  to  be  man¬ 
aged  by  the  nonprofit 
Eclipse  Foundation.  This 
move  prompted  Sun  to 
publish  an  open  letter  to 
the  Eclipse  membership 
(see  www.newsforge.com/ 
programming/04/01/30/ 

1746245.shtml  for  a  pub¬ 
lished  version). 

One  cannot  read  the 
open  letter  without  sens¬ 
ing  Sun’s  frustration  with  the  way 
Eclipse  has  contributed  to  the  success 
of  Java  while  simultaneously  subvert¬ 
ing  some  of  Java’s  platform  neutrality. 
Sun  dances  around  the  issue,  claiming 
that  the  “sticking  points”  in  the  discus¬ 
sion  about  Sun  adopting  Eclipse  as  a 
standard  development  platform  were 
“not  so  much  technical  in  nature  as 
they  were  business-related.” 

The  company  then  claims  that 
transitioning  to  the  Eclipse  platform 
would  “inhibit  development  of  innov¬ 
ative  technologies”  and  “require  a 
reconstruction  of  all  of  our  existing 
tools.” 

Sun  currently  bases  all  of  its  tools  on 
the  NetBeans  IDE.  Like  Eclipse,  Net- 
Beans  is  open-source  and  more  or  less 
community-driven.  Eclipse  has  a  larg¬ 
er  and  more  active  community  than 
NetBeans,  and  that  isn’t  likely  to 
change  anytime  soon. 


All  things  being  equal, 
it  would  therefore  seem 
worthwhile  for  Sun  to  re¬ 
construct  all  of  its  tools 
to  adopt  Eclipse  as  its 
foundation.  All  things  are 
not  equal,  however.  Net¬ 
Beans  is  built  around  Sun’s 
graphical  interface  tool  kit 
Swing.  Eclipse,  on  the  oth¬ 
er  hand,  uses  the  Standard 
Widget  Toolkit  (SWT)  for 
its  graphical  user  interface. 

Here  is  the  subtle  but 
important  difference  be¬ 
tween  Swing  and  SWT. 
Swing  is  designed  to  give  Java  applica¬ 
tions  a  unique  look  and  feel  that’s  the 
same  across  all  the  platforms  where 
Java  is  supported.  Swing  achieves  this 
goal  at  the  cost  of  performance  and,  in 
the  eyes  of  some  developers  and  users 
(myself  included),  aesthetic  appeal. 

SWT  is,  in  a  sense,  an  anti-Swing. 
SWT  is  designed  to  give  Java  applica¬ 
tions  the  native  look  and  feel  of  non- 
Java  applications  on  any  given  plat¬ 
form.  SWT  does  not  go  so  far  as  to  de¬ 
rail  the  platform  neutrality  of  Java, 
however.  SWT  exploits  the  speed  and 
usability  of  each  native  interface  while 
insulating  programmers  from  the  dif¬ 
ferences  between  platforms. 

Obviously,  this  goal  is  not  easily  at¬ 
tained,  as  is  evidenced  by  the  fact  that 
you  can’t  even  print  files  from  SWT 
applications  that  use  the  GTK  (Gimp 
Toolkit)  graphical  interface. 

SWT  had  a  crucial  role  in  the  suc- 
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cess  of  Eclipse  because  its  speed  and 
native  look  and  feel  made  Eclipse 
more  attractive  than  Swing-based 
development  tools.  The  problem  for 
Sun  is  that  SWT  didn’t  buy  into  the 
philosophy  that  Java  is  the  platform, 
and  that  the  underlying  operating  sys¬ 
tem  should  be  totally  irrelevant.  Yet 
Sun  is  hard  pressed  to  complain  be¬ 
cause  Eclipse  has  contributed  greatly 
to  the  success  of  Java. 

There  are  many  reasons  why  I 
would  use  Eclipse  over  NetBeans, 
but  SWT  is  the  least  of  them.  Given 
the  speed  and  low  cost  of  today’s 
PCs,  I  find  the  performance  advan¬ 
tage  of  SWT  over  Swing  to  be  barely 
perceptible.  One  could  argue  that 
SWT  applications  are  prettier  than 
Swing  applications,  but  as  time  pass¬ 
es,  SWT  seems  more  like  a  divisive 
duplication  of  effort  running  out  of 
problems  to  solve. 

SWT  has  a  strong  following,  though, 
and  that’s  likely  to  keep  it  alive  long 
after  it  has  outlived  its  original  pur¬ 
pose.  Can  SWT  co-exist  with  Swing  in 
the  long  haul?  Sun  is  attempting  to 
bridge  the  two  graphical  tool  kits  by 
making  it  possible  to  embed  Swing 
components  into  SWT.  That’s  likely  to 
elicit  no  more  than  a  yawn  from  the 
Eclipse  community.  Even  if  Sun  can 
come  up  with  a  component  that  is 
compelling  enough  to  make  Eclipse 
users  want  to  adopt  it,  Eclipse  fans  are 
more  likely  to  reproduce  the  compo¬ 
nent  in  SWT  than  use  a  Swing  version. 

The  Pollyanna  view  of  the  SWT/ 
Swing  debate  would  be  that  having  a 
choice  is  always  a  good  thing.  I  agree, 
as  long  as  the  choice  of  SWT  doesn’t 
have  a  negative  impact  on  the  platform 
neutrality  of  Java.  ©  44494 
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CAREERS 

Getting  the  Right  Fit 

CIOs  need  to  fully  investigate 
the  company’s  culture,  politics 
and  executives  before  agreeing 
take  a  new  job,  advises  former 
CIO  Doug  Lewis.  Page  44 
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Q&A 

Measuring  Intangible  Assets 

Putting  a  value  on  a  company’s  intangible  assets 
—  including  IT  —  is  nigh  impossible.  But  the 
creators  of  the  balanced  scorecard  methodol¬ 
ogy  say  measuring  intangibles’  alignment  with 
value-creating  strategies  is  a  good  start.  Page  42 


OPINION 

The  Case  of  the  Missing  Metrics 

When  dealing  with  outsourcing  con¬ 
tractors,  “If  you  don’t  use  the  metrics 
you  designed  and  negotiated,  you’ll  get 
the  performance  you  deserve,”  says 
Bart  Perkins.  Page  46 
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A  HEADLINE  MAY  SAY  that  a 

company  signed  a  $320  mil¬ 
lion  IT  outsourcing  contract, 
but  the  actual  costs  will  likely 
be  much  higher.  Behind  the  scenes,  the 
client  spends  big  bucks  on  evaluating 
vendors,  managing  the  contract,  en¬ 
hancing  security,  traveling  to  offshore 
sites  and  potentially  paying  severance 
packages  for  laid-off  employees. 

And  that’s  only  part  of  what  can  in¬ 
flate  the  dollar  figure  quoted  in  a  basic 
contract. 

“Things  change  over  time,  and  that 
inevitably  leads  to  some  form  of  cost- 
shifting,”  says  John  Hill,  CIO  at  Praxair 
Inc.,  a  Danbury,  Conn.-based  manufac¬ 
turer  of  gases.  He  suggests  that  con¬ 
tracts  be  designed  to  accommodate 
some  flexibility,  such  as  changes  in  la¬ 
bor  or  computer  and  network  hardware. 

Other  IT  managers  and  outsourcing 
consultants  point  out  that  unexpected 
costs  can  arise  during  any  phase  of  the 
project.  Anyone  considering  outsourc¬ 
ing  should  take  a  close  look  at  these  po¬ 
tential  costs  or  risk  miscalculating  the 
true  benefits  of  outsourcing. 


Vendor  Selection 

Many  organizations  overlook  the  costs 
associated  with  evaluating  and  selecting 
a  contractor.  The  process  typically  can 
drag  on  for  many  months,  depending  on 
the  project’s  complexity,  and  requires 


time  commitments  from  senior  execu¬ 
tives  in  IT,  human  resources,  finance, 
legal  and  other  departments. 

“It’s  a  very  complex  [market],  with 
many  service  providers  that  have 
changing  terms  and  conditions,”  says 
Shawn  McCray,  a  partner  at  TPI  Inc.,  an 
outsourcing  advisory  firm  in  The 
Woodlands,  Texas. 

If  the  potential  contractors  are  locat¬ 
ed  offshore,  organizations  could  incur 
extensive  travel  expenses  for  visits  to 
evaluate  services.  “A  lot  of  times,  off¬ 
shore  service  providers  have  very  good 
sales  and  marketing  abilities,  but  com¬ 
panies  need  to  [scrutinize  potential  con¬ 
tractors]  to  see  what  their  real  capabili¬ 
ties  are,”  McCray  says. 

In  some  cases,  organizations  will 
need  to  buy  studies  from  independent 
research  firms  —  at  a  cost  of  thousands 
of  dollars  —  to  evaluate  outsourcing 
vendors,  says  Atul  Vashistha,  CEO  of 
NeoIT.com  Inc.,  an  offshore  outsourc¬ 
ing  advisory  firm  in  San  Ramon,  Calif. 

IT  and  business  leaders  who  haven’t 
clearly  defined  the  goals  for  the  out¬ 
sourcing  project  or  communicated  them 
to  the  managers  negotiating  the  deal 
also  slow  down  vendor  selection  and 
the  contract-signing  process.  “The  peo¬ 
ple  negotiating  the  contract  could  be  fo¬ 
cusing  on  the  wrong  things,”  which  will 
result  in  delays  in  getting  the  contract 
ironed  out,  McCray  says. 


Outsourcing  may  save  less  money  than  you  think.  The 
hidden  expenses  include  vendor  evaluation,  extra  securi¬ 
ty,  airline  tickets  and  severance  pay.  BY  bob  violino 
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AH  told,  choosing  the  right  vendor 
and  writing  the  contract  costs  about 
3%  of  the  total  outsourcing  cost,  ac¬ 
cording  to  a  2001  study  of  50  IT  out¬ 
sourcing  deals  by  French  academic 
Jerome  Barthelemy. 

Transition  Period 

Unexpected  costs  can  crop  up  during 
the  early  stages  of  the  outsourcing  re¬ 
lationship,  when  knowledge  is  trans¬ 
ferred  from  people  on  staff  to  mem¬ 
bers  of  the  outsourcing  team.  If  the 
contractor  is  located  offshore,  that  can 
mean  extensive  travel  expenses  and 
cultural  or  language  training  for  em¬ 
ployees  who  visit  the  contractor’s  site, 
possibly  for  months. 

If  the  client  and  outsourcing  vendor 
need  to  transfer  data  between  their 
systems,  that  might  require  the  deploy¬ 
ment  of  additional  network  bandwidth 
and  security  technologies,  says  Mc¬ 
Cray.  Companies  using  an  offshore 
outsourcing  service  will  also  need  to 
be  aware  of  the  communications  and 
data  encryption  regulations  and  re¬ 
quirements  in  different  countries  in  or¬ 
der  to  make  the  necessary  network  up¬ 
grades  to  comply  with  them.  For  exam¬ 
ple,  compliance  with  U.S.  regulations 
such  as  the  Sarbanes-Oxley  Act  and 
the  Health  Insurance  Portability  and 
Accountability  Act  could  lead  to  addi¬ 
tional  IT  costs  for  some  financial  ser¬ 
vices  and  health  care  companies. 

Organizations  that  are  replacing  em¬ 
ployees  with  outsourced  staffs  through 
layoffs  or  attrition  could  face  human 
resources  costs  for  severance  pay  and 
employee  benefits.  Depending  on  how 
many  people  are  involved,  these  ex¬ 
penses  can  run  into  hundreds  of  thou¬ 
sands  of  dollars.  Vashistha  notes  that 
there  may  also  be  costs  resulting  from 
decreased  productivity  of  workers  who 
are  slated  to  lose  their  jobs. 

Some  companies  might  have  to  pay 
retention  bonuses  to  managers  and 
staffers  they  want  to  keep  on  board 
during  the  transition  and  beyond, 
Vashistha  says.  “If  the  people  you  want 
to  [retain  do]  leave,  you’re  in  trouble,” 
he  says,  because  the  contractor  often 
depends  on  the  knowledge  and  experi¬ 
ence  of  these  people.  “Companies  have 
to  use  good  HR  practices  to  keep  the 
people  they  need.” 

If  the  outsourcing  arrangement  in¬ 
volves  moving  U.S.-based  people  to 
overseas  locations,  Vashistha  says, 
those  costs  could  amount  to  $400,000 
to  $600,000  each  year  per  employee, 
including  travel,  family  relocation,  tax¬ 
es,  training  and  other  expenses. 

For  outsourcing  projects  that  involve 
the  transfer  of  IT  and  communications 


assets  to  the  contractor,  organizations 
could  encounter  unexpected  costs  if 
they  haven’t  done  a  thorough,  up-to- 
date  accounting  of  assets.  Textron 
Financial  Corp.  in  Providence,  R.I., 
learned  this  when  it  outsourced  all  of 
its  telecommunications  and  data  net¬ 
working  operations  to  AT&T  Solutions 
in  1996.  CIO  David  Raspallo  says  Tex¬ 
tron  underestimated  the  value  of  the 
assets,  including  servers  and  desktops, 
that  it  transferred  to  AT&T  as  part  of 
its  contract.  The  fact  was  discovered 
when  the  outsourcer  did  an  audit,  and 
Textron  incurred  unexpected  account¬ 
ing  costs  to  fix  the  inconsistencies. 

“If  you  don’t  have  an  asset  manage¬ 
ment  system  that  gives  you  an  accurate 
and  up-to-date  accounting  of  all  the  as¬ 
sets  in  the  organization,  that’s  where 
the  major  surprise  comes,”  Raspallo 
says.  “You  could  have  some  serious 
miscounts.” 

Managing  the  Contract 

After  the  contract  is  signed  and  the 
work  begins,  companies  can  expect  to 
spend  an  average  of  $300,000  per  year 
managing  the  IT  outsourcing  contrac¬ 
tor,  according  to  Barthelemy’s  study. 

“People  often  underestimate  the 
amount  of  effort  and  energy  and  the 
resources  it  takes  to  manage  the  rela¬ 
tionship  properly,”  including  the  trans¬ 
fer  of  in-house  and  outsourcing  staffs, 
says  Praxair’s  Hill.  His  company’s 
South  American  facilities  outsource 
some  computer  operations,  and  its  U.S. 
sites  outsource  functions  such  as  desk¬ 
top  support. 

“There  can  be  significant  overhead 
costs  in  just  managing  the  financial 
terms  on  an  ongoing  basis,”  Hill  says. 
“If  it’s  an  offshore  contract,  there  can 
be  substantially  more  overhead  just 
handling  the  coordination  of  work 


Tips  for  Containing 
Outsourcing  Costs 

Assess  the  organization’s  goals 
and  requirements  before  committing 
to  outsourcing,  to  avoid  wasting 
time  and  money  in  the  vendor- 
selection  process. 

Consider  all  aspects  of  using  an 
offshore  outsourcing  partner,  includ¬ 
ing  travel,  telecommunications,  data 
networking,  language  differences, 
regulations  and  security. 

Prepare  for  the  human  resources 
issues  that  could  come  up  -  sever¬ 
ance  pay,  benefits,  loss  of  productiv¬ 
ity  -  if  employees  are  displaced  be¬ 
cause  of  the  outsourcing  deal. 

Be  prepared  to  manage  the  rela¬ 
tionship  to  gain  the  maximum  bene¬ 
fits  possible.  Create  a  team  of  expe¬ 
rienced  project  managers  to  oversee 
the  contract. 


transfer  between  the  offshore  site  and 
onshore  analysts.  I  think  that’s  often 
underestimated.” 

Another  extra  cost  that  may  come 
up  during  the  management  phase  is 
the  hiring  of  an  experienced  contract 
manager.  Companies  may  come  to 
realize  that  no  one  on  staff  is  capable 
of  managing  a  complex  project  —  or 
can  devote  sufficient  time  to  it  —  and 
may  instead  turn  to  an  outside  expert 
for  help. 

Organizations  that  don’t  continuous¬ 
ly  manage  and  evaluate  the  contractor 
relationship  could  end  up  with  addi¬ 
tional  costs  or  loss  of  benefits  because 
they’re  not  getting  what  they  paid  for. 
This  is  especially  true  for  companies 
that  have  hired  multiple  outsourcing 
vendors  for  different  functions. 

McCray  says  it’s  wise  to  create  an 


outsourcing  management  organization 
that  oversees  long-term  service  con¬ 
tracts  and  understands  the  objectives 
of  each  partnership.  TPI  recently 
helped  a  client  with  multiple  outsourc¬ 
ing  relationships  save  $200  million 
over  the  course  of  the  contracts  by  de¬ 
veloping  such  an  organization. 

“You  can’t  abdicate  management  to 
the  service  provider,  or  you  will  pay 
the  consequences,”  McCray  says. 

Nielsen  Media  Research  Inc.,  which 
in  1995  began  outsourcing  select  appli¬ 
cation  development  work  to  Cognizant 
Technology  Solutions  Corp.,  an  out¬ 
sourcer  in  India,  created  a  U.S.-based 
employee  “anchor  team”  responsible 
for  project  control  and  quality  assur¬ 
ance.  Nielsen  has  created  similar 
teams  for  other  outsourcing  projects 
that  typically  include  three  or  four 
Nielsen  employees  who  devote  all  or 
most  of  their  time  to  managing  the 
outsourcing  work,  says  Kim  Ross,  CIO 
at  the  New  York-based  company. 

In  addition,  for  each  outsourced 
project,  Nielsen  relies  on  about  three 
people  from  the  outsourcing  company 
to  serve  as  U.S.-based  liaisons  and  as¬ 
sist  in  project  management.  “This  liai¬ 
son  team  is  more  expensive  per  hour 
but  is  warranted  to  avoid  extra  time 
and  effort  losses  due  to  project  control 
and  business  knowledge  issues,”  Ross 
says.  In  order  to  keep  costs  contained, 
it’s  important  to  have  the  correct  num¬ 
ber  of  people  helping  with  contract 
management,  he  adds.  Too  many 
means  higher-than-necessary  fees;  too 
few  invites  the  risk  of  project  failures. 

With  a  strong  U.S.-based  anchor 
team  and  liaison  group  working  with 
the  offshore  outsourcing  staff,  Ross 
says,  “the  quality  and  delivery  time 
can  match  nonoutsourced  develop¬ 
ment  projects,  so  there  is  no  hidden 
cost  due  to  poor  project  quality  or 
[late]  delivery.” 

Unexpected  costs  are  sure  to  arise  in 
any  outsourcing  endeavor.  But  with 
thorough  planning  and  close  alignment 
between  the  outsourcing  project  and 
overall  business  goals,  companies  can 
minimize  those  costs. 

“You  need  to  think  through  the  sce¬ 
narios  and  the  what-ifs  long  term  as 
well  as  short  term”  to  anticipate  what 
costs  might  emerge  and  ensure  that 
the  outsourcing  provider  is  delivering 
the  expected  services,  says  Hill.  “At  the 
end  of  the  day,  an  outsourcing  relation¬ 
ship  is  a  task-based  performance  con¬ 
tract,  not  a  partnership.”  ©  44271 


Violino  is  a  freelance  writer  in  Massape- 
qua  Park,  N.Y.  He  can  be  reached  at 
bviolino@optonline.net. 


OUTSOURCING  TRANSFER  COSTS 


Transition  costs  can  add  up  to  5%  to  159b  of  the  annual  base  cost  of  the  contract. 

Here's  an  example  of  an  outsourced  data  center  (mainframe,  Unix  and  NT),  for 
which  the  total  deal  size  is  $25  million  over  five  years,  equaling  $5  million  per  year. 


ITEM 

ESTIMATED  COST 

Process  (knowledge  transfer) 

$50,000 

People  (employee  severance  plans) 

$100,000 

Technology  ■  Software  license  transfers 

$100,000 

■  Moving  acquired  hardware 

$150,000 

■  Parallel  processing  for  critical  apps 

$50,000 

■  New  network  connections 

$50,000 

Subtotal 

$500,000 

Other  contingencies  (10%) 

$50,000 

TOTAL 

$550,000 

ANNUAL  PERCENTAGE  OF  DEAL 

11°/o 

SOURCE:  OARTNER  INC.,  STAMFORD.  CONN..  2003 


Middleware  is  Everywhere 


Can  you  see  it? 


MIDDLEWARE  IS  IBM  SOFTWARE.  Powerful  software 
including  DB2*  Lotus?  Rational  Tivoli*  and  WebSphere*  that 
develops,  integrates  and  manages  your  applications  and 
systems.  Everything  is  efficient  and  seamless.  Across  the 
board.  Across  platforms.  Microsoft*  Oracle.  Sun.  You  name  it. 
IBM’s  flexible  open  middleware  can  connect  it  all.  It’s  instant 
business  benefit.  Instant  customer  satisfaction.  On  demand, 
(©business  on  demancTat  ibm.com/software/integrate 


1.  Instantly  admitting  patient. 

2.  Immediately  processing  claim. 

3.  Automatically  approving  procedure. 

4.  Constantly  tracking  treatment. 

5.  Directly  assessing  costs. 


Middleware 
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Intangible  assets  don’t  cre¬ 
ate  value  by  themselves,  so 
they’re  not  easily  tradable  or 
salable  to  others.  Their  value 
comes  only  in  the  context  of 
the  organization  and  has  to  be 
linked  to  organizational  strate¬ 
gy  and  to  all  the  other  intangi¬ 
ble  and  tangible  assets  the  or¬ 
ganization  has. 

You  note  that  intangible  assets  sel¬ 
dom  affect  financial  performance 
directly.  How  do  they  affect  it? 

You  can’t  link  investments  in 
intangible  assets  directly  to  a 
financial  return  on  invest¬ 
ment.  Improvements  in  peo¬ 
ple,  systems  or  reward  sys¬ 
tems  of  the  organization  work 
by  improving  processes, 
which  in  turn  create  more  val¬ 
ue  for  customers,  and  that  fi¬ 
nally  results  in  higher  rev¬ 
enues  and  margins. 

You  have  to  work  through 
this  indirect  chain  with  a 
valid  strategy  before  you  can 
realize  improved  financial 
performance  from  your  IT 
investment. 

You  suggest  that  a  useful  way 
of  measuring  the  value  of  intangi¬ 
ble  assets  is  to  estimate  how 
closely  aligned  those  assets  are 
with  the  company’s  strategy. 

Can  you  explain?  If  you’re  fol¬ 
lowing  a  low-cost  strategy, 
you  want  people  trained  in 
quality  and  process  improve¬ 
ment  so  they  can  reduce  the 
cost  of  processes  and  prod¬ 
ucts.  You  want  IT  applications 
that  promote  continuous  im¬ 
provement  and  quality  im¬ 
provement,  incentives  that 
reward  people  for  lowering 
costs  and  improving  quality, 
and  a  culture  of  continuous 


improvement.  Then  you  have 
intangible  assets  aligned  to  a 
low-cost  strategy. 

If  you  have  a  product-inno¬ 
vation  strategy,  you  want  peo¬ 
ple  trained  in  the  science  and 
technology  of  the  underlying 
product.  You  want  informa¬ 
tion  systems  such  as  three- 
dimensional  simulation  and 
virtual  prototyping.  And  you 
want  a  culture  and  reward  sys¬ 
tem  aligned  around  innovation 
and  creativity. 

You  call  that  alignment  of  assets 
and  strategy  “strategic  readi¬ 
ness.”  How  is  strategic  readiness 
related  to  the  concept  of  liquidity 
in  accounting?  Accountants  or¬ 
ganize  balance  sheets  around 
a  hierarchy  that  puts  cash,  ac¬ 


counts  receivable,  inventory  at 
the  top,  followed  by  longer- 
term  assets  like  property, 
plants  and  equipment. 

The  hierarchy  is  based  on 
liquidity:  how  quickly  these 
assets  can  be  converted  to 
cash.  Intangible  assets  can 
also  use  this  measure.  If  you 
have  a  very  well-trained  work¬ 
force  with  all  the  IT  applica¬ 
tions  and  infrastructure  they 
need,  you  can  deliver  value  on 
strategy  very  quickly.  You 
have  a  high  degree  of  strategic 
readiness. 

If  you  move  to  a  new  strate¬ 
gy,  and  employees  have  to  be 
retrained  and  reskilled  and 
you  need  a  new  set  of  IT  ap¬ 
plications,  there’s  a  low  de¬ 
gree  of  strategic  readiness. 


You  point  out  that  one  of  the  prob¬ 
lems  in  attempting  to  value  intangi¬ 
bles  is  that  their  worth  differs  for 
different  people.  Can  you  explain? 

With  tangible  assets  like 
buildings  or  machines,  the  val¬ 
ue  is  relatively  similar  for  dif¬ 
ferent  kinds  of  users.  If  I  can’t 
get  the  maximum  use  out  of 
those  assets,  I  can  sell  them  to 
someone  else  who  can.  Their 
value  is  somewhat  indepen¬ 
dent  of  use. 


How  valuable 


are  a  company’s 
IT  systems, 
employee  skills, 
culture?  For 


many,  they  are 
worth  far  more 
than  the  physi¬ 
cal  and  finan¬ 
cial  assets  that 


can  be  tallied  on  a  balance 


sheet.  Measuring  the  value  of 
intangible  assets  has  been  the 
Holy  Grail  of  accounting,  but  in 
February’s  Harvard  Business 
Review,  Robert  S.  Kaplan  and 
David  P.  Norton,  who  created 
the  balanced  scorecard,  pro¬ 
pose  a  new  approach.  “You 
cannot  ‘value’  intangible  as¬ 
sets,”  says  Kaplan,  “but  you 
can  certainly  measure  them 
and  their  alignment  with  value- 
creating  strategies.” 

Kaplan,  the  Marvin  Bower 
Professor  of  Leadership  Devel¬ 
opment  at  Harvard  Business 
School,  showed  Kathleen  Mely- 
muka  how  the  balanced  score- 


card  —  a  methodology  used  to 
analyze  business  performance 
from  four  perspectives:  finan¬ 
cial,  customer,  business  process, 
and  learning  and  growth  — 
can  help  you  measure  those 
intangibles. 


FOCUSING  ON  STRATEGIC  READINESS 


Looking  at  intangible  assets  through  the  prism  of 
company  strategy  reveals  clear  areas  of  focus  for  improving 
the  strategic  readiness  that  leads  to  value  creation. 
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Customer  and  stockholder  value 


Measuring 

INTANGIBLE  ASSETS 

A  new  approach  looks  for  value  through  the  prism  of  company  strategy. 


It  will  be  a  long  time  before 
intangible  assets  are  fully 
capable  of  delivering  value. 

So  it’s  a  measure  of  how 
quickly  people,  systems  and 
culture  can  create  value  with 
a  strategy. 

You  focus  on  three  types  of  intangi¬ 
ble  assets:  human  capital,  informa¬ 
tion  capital  and  organization  capi¬ 
tal.  When  you  look  at  the  strategic 
readiness  of  information  capital, 
what  are  you  trying  to  measure? 

In  the  internal  perspective  of  a 
balanced  scorecard,  an  organi¬ 
zation  identifies  the  five  to 
12  critical  processes  that  are 
most  important  to  deliver  the 
customer  value  proposition 
and  determine  the  success  of 
a  strategy. 

For  a  company  that  is  fol¬ 
lowing  a  complete-customer- 
solution  strategy,  does  it  have 
the  information  systems  to 
understand  the  customer,  in¬ 
cluding  data  mining  capabili¬ 
ties  and  tracking  of  all  the 
relationships  it  has  with  the 
customer? 

Fifteen  years  ago,  when 
Procter  &  Gamble  started  to 
work  with  Wal-Mart  inten¬ 
sively,  it  didn’t  have  customer- 
focused  systems.  Each  brand 
knew  Wal-Mart  as  a  customer, 
but  it  was  coded  differently  in 
each  factory.  Procter  &  Gam¬ 
ble  couldn’t  even  add  up  all 
its  sales  with  Wal-Mart.  How 
can  you  have  a  customer- 
focused  strategy  without  an 
integrated  system? 

If  you’re  going  to  have  a 
customer-focused  strategy, 
you’re  going  to  need  IT  sys¬ 
tems  that  are  very  customer- 
focused.  If  you’re  following  a 
low-cost  strategy,  you  need 
IT  systems  that  support  cost 
reduction  and  process  im¬ 
provement.  Strategic  readi¬ 
ness  measures  the  alignment 
of  IT  resources  and  capabili¬ 
ties  with  the  organization’s 
strategy.  ©  44408 


Melymuka  is  a  Computerworld 
contributing  writer.  She  can 
be  reached  at  kmelymuka@ 
yahoo.com. 


This  is  the  latest  in  a  series  of 
monthly  discussions  with  Harvard 
Business  Review  authors  on  topics 
of  interest  to  IT  managers. 


Middleware  is  Everywhere 


Can  you  see  it? 


MIDDLEWARE  IS  IBM  SOFTWARE.  Powerful  software  like 
IBM  WebSphere®  Using  an  open  and  scalable  foundation 
WebSphere  software  lets  you  swiftly  respond  to  change.  On 
demand.  Applications  are  easily  updated,  tested  and  deployed. 
Lead  time  is  shortened.  And  everything  clicks,  regardless  of 
platform.  WebSphere  delivers  it  all.  On  the  money.  On  demand 
(©  business  on  demancTat  ibm.com/websphere/middleware 


1.  New  design  already  tested. 

2.  Suppliers  already  linked. 

3.  Procurement  already  automated 

4.  Blueprints  already  updated. 

5.  Engine  all  ready  for  takeoff. 


WebSphere 
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jobs  all  too  often. 

Here’s  how  to  make  sure  your  next 
employer  matches  your  style. 


BY  DOUG  LEWIS 


CAREERS 


“TAKE  THIS  JOB  AND  SHOVE  IT.” 

Johnny  Paycheck  sang  in  1977.  He 
was  expressing  the  frustration  of 
being  trapped  in  a  really  bad  job  and  offering  a  rather 
caustic  solution  to  the  situation. 

Most  CIOs  have  the  “opportunity”  to  change  jobs 
more  than  once  in  their  careers.  Let’s  assume  you’re 
a  transitioning  CIO  and  have  a  choice  of  several  new 
positions.  Pay,  benefits  and  perks  are  all  about  the 
same.  How  do  you  avoid  Paycheck’s  job  from  hell? 
First,  evaluate  the  job,  the  company,  the  corporate 
structure,  the  political  climate  and  your  potential 
boss.  Second,  evaluate  yourself  to  see  if  there’s  a 
good  match  in  each  of  those  areas. 

THE  JOB 

■  Will  you  be  happy  in  the  job?  This  is  the  most  critical 
aspect  of  evaluating  a  new  job,  a  new  boss  and  a  new 
company.  There  isn’t  enough  money,  status  or  securi¬ 
ty  in  any  job  to  overcome  a  miserable  situation.  The 
job  needs  to  satisfy  your  emotional  and  professional 
needs.  It  needs  to  match  up  with  your  present  skills 
and  provide  growth  opportunities  that  are  in  line 
with  your  ambitions.  It  needs  to  mesh  with  your  pre¬ 
ferred  lifestyle  and  family  commitments.  Some  com¬ 
panies  honor  work/life  balance,  and  some  expect 
you  to  work  12  hours  a  day,  seven  days  a  week.  Some 
have  moderate  travel  expectations,  and  some  will  get 
you  to  Million  Miler  status  quickly. 

Make  sure  you  know  the  company’s  culture  and 
expectations,  and  make  sure  they  match  yours.  Oth¬ 
erwise,  something’s  going  to  give.  It  may  be  the  job, 
your  marriage  or  your  health,  but  it  will  be  more 
painful  than  turning  down  the  job  in  the  first  place. 

■  Can  you  do  the  job?  I’ve  seen  people  who  inter¬ 
viewed  so  beautifully  they  could  woo  any  hiring 
manager,  even  with  only  a  so-so  match  to  the  job’s 
requirements.  But  they  usually  don’t  last  long.  The 
shortfall  in  skills  catches  up  with  them,  and  they’re 
out.  For  CIOs,  a  lack  of  political  skills  is  actually 
more  of  a  problem  than  a  lack  of  technical  skills. 

Be  honest  in  assessing  your  fit  to  the  job  require¬ 
ments.  You  may  snow  people  for  a  while,  but  it’s  you 
who  will  end  up  in  the  cold. 

■  What’s  the  future  of  this  job?  The  CIO’s  role  doesn’t 
stay  the  same  for  long.  Besides  knowing  the  expecta¬ 
tions  for  the  position  today,  get  an  idea  what  you’ll  be 
asked  to  do  two,  three  and  even  five  years  out.  Make 
sure  this  job  trajectory  matches  your  career  plans. 

■  How  do  you  find  out?  Seize  control  of  the  interview 
agenda.  Ask  to  speak  to  people  who  would  be  your  in- 
house  customers,  peers  and  subordinates.  Ask  them 
what  they’ll  expect  from  you  in  terms  of  deliverables, 
schedules  and  cost. 

The  hardest  thing  for  me  to  do  is  the  self-assess- 
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ment,  so  I  rely  on  my  spouse  and  on  a  few  very  trust¬ 
ed  associates  to  be  honest  with  me.  Develop  your 
own  set  of  trusted  advisers  to  help  you  determine 
your  fit  for  the  position. 

THE  CORPORATE  STRUCTURE 

■  Know  how  the  company  operates.  A  company’s  operat¬ 
ing  model  has  a  surprisingly  big  effect  on  the  CIO’s 
role  [QuickLink  43476].  A  holding  company  with 
strong  business  units  gives  a  CIO  lots  of  accountabil¬ 
ity  with  little  authority.  In  this  case,  persuasive  abili¬ 
ty  is  an  absolute  must,  while  operational  skills  are 
less  important.  On  the  other  hand,  operating  compa¬ 
nies  with  strong  centralized  control  place  huge  value 
on  CIOs  who  have  excellent  execution  skills  and  de¬ 
tailed  knowledge  of  every  facet  of  the  IT  domain. 

Global  companies  require  a  CIO  with  multination¬ 
al  experience,  cultural  sensitivity  and  a  cast-iron 
butt  to  survive  a  punishing  travel  schedule.  For- 
eign-owned  companies  expect  you  to  operate  in 
their  style  (and  knowing  the  native  language  may 
be  an  unspoken-but-critical  success  factor). 

At  family-owned  businesses,  you’ll  find  that  cer¬ 
tain  career  paths  are  reserved  for  family  members 
and  that  you’re  expected  to  tolerate  the  idiot  nephew 
screwing  up  the  network  group. 

■  Learn  where  IT  sits  in  the  company  hierarchy  and  why. 
If  IT  reports  way  down  in  the  organizational  struc¬ 
ture  —  and  you’re  expected  to  accomplish  great 
change  —  run  like  hell.  If  IT  reports  to  the  CEO,  be 
sure  you  can  hold  your  own  in  a  boardroom  setting 
and  be  prepared  for  blood-sport  politics. 

■  How  do  you  find  out?  A  quick  look  at  the  annual  re¬ 
port  will  reveal  the  corporate  structure,  ownership 
and  geographic  dispersion.  Figure  out  where  the  CIO 
sits  on  the  organizational  chart.  And  use  the  Internet 
to  find  articles  and  speeches  by  key  executives  and 
even  IT  staff  members  to  learn  more  about  the  com¬ 
pany’s  operational  style. 

THE  POLITICAL  CLIMATE 

Gauging  the  job’s  political  climate  is  difficult,  but  it’s 
the  second  most  important  thing  to  get  right.  The 
easiest  IT  job  can  be  made  impossible  by  the  wrong 
political  environment. 

I  watched  an  excellent  CIO  get  torpedoed  this  way. 
He  was  hired  by  the  CEO  to  consolidate  shared  IT 
functions  in  a  company  with  multiple  business  units. 
Assured  that  he  had  the  full  backing  of  the  business 
units,  he  took  the  job  and  charged  ahead  with  a  very 
reasonable  plan. 

What  the  CIO  didn’t  know  was  that  the  CEO  didn’t 
have  the  backing  of  the  business-unit  presidents  or 
the  backbone  to  stand  up  to  them  when  they  rebelled 
against  losing  their  IT  turf.  The  CEO  backed  down, 


Trajectory  Matters 

When  researching  your  next  employer,  try  to  identify  the  company’s  trajectory. 

Is  it  recovering,  accelerating,  coasting  or  failing?  Each  path  has  implications  for  the  new  CIO. 


RECOVERING  ACCELERATING  COASTING  FAILING 

COMPANIES  COMPANIES  COMPANIES  COMPANIES 


A  CIO  experienced 
in  doing  turnarounds 
[QuickLink  41369] 


Someone  who  can 
support  rapid  expansion  - 
without  parallel  growth 
in  IT  spending 


An  optimizer 
and  cost-squeezer 


Someone  dumb  enough  to 
take  the  job,  barely  smart 
enough  to  do  the  job  and 
willing  to  take  a  meat  ax 
to  budgets  and  people 


The  ability  to  make  quick 
assessments,  build  rela- 
execute  quickly 
and  endure  tough  times 


Vision,  aggressiveness 
and  business  acumen 


A  focus  on  cost  details, 
process  optimization  and 
fine-tuning  existing  appli¬ 
cations  and  operations 


A  cold  heart 
and  a  bodyguard 


and  you  can  guess  what  happened  to  the  CIO. 

I  saw  another  exceptionally  talented  CIO  get  into  a 
job  well  within  his  leadership  abilities  but  way  over 
his  head  politically.  Denied  the  political  “air  cover” 
his  boss  had  promised,  the  CIO  went  down  in  flames. 

■  How  do  you  find  out?  Look  your  potential  boss 
straight  in  the  eye  and  ask  if  there’s  solid  support  for 
the  role  you’ll  be  asked  to  play.  Have  the  business- 
unit  presidents  bought  in?  If  he  flinches,  blinks  or 
hedges,  suspect  that  things  aren’t  right.  Meet  two  or 
three  business-unit  presidents  and  ask  how  they  feel 
about  the  CIO  position  and  their  commitments  to 
what  you’ll  be  asked  to  do.  Find  some  people  who 
have  left  the  company  and  talk  with  them.  Best  of  all, 
talk  with  the  previous  CIO. 

THE  NEW  BOSS 

Picking  a  boss  ranks  just  under  picking  a  spouse  in 
terms  of  impact  on  your  life.  (It’s  not  the  same  level 
of  intimacy,  but  you’ll  probably  spend  more  waking 
hours  with  the  boss.) 

Know  what’s  important  to  you  in  a 
professional  relationship.  My  list 
isn’t  long: 

■  I  need  to  respect  my  boss, 
and  I  want  respect  in  return. 

■  High  business  and  personal 
ethics  are  mandatory. 

■  Consideration  of  the  fact 
that  I  have  a  personal  life  is  a  re¬ 
quirement. 

■  I  want  my  boss  to  be  compe¬ 
tent.  If  he’s  not,  I  can’t  hope  to  be 
successful. 

■  I  hope  to  like  my  boss,  but 
not  liking  him  isn’t  a  stopper  if 
the  other  criteria  are  satisfied. 

You  need  your  own  list  —  and 
don’t  compromise.  The  trick  is  to 
find  out  what  it’s  like  to  work  for 
this  person.  What’s  his  style,  and 
does  it  mesh  with  yours?  Does 
the  boss  have  the  clout  to  accom¬ 
plish  the  vision?  What’s  his  tra¬ 
jectory  in  the  company:  rising, 


coasting  or  falling?  (His  trajectory  will  influence 
your  clout.)  What’s  his  track  record  in  previous  com¬ 
panies?  Does  he  understand  IT?  If  he  can  barely  turn 
on  his  computer  without  help  desk  support,  he’s  un¬ 
likely  to  be  much  of  a  supporter  in  the  boardroom 
when  things  get  tough. 

■  How  do  you  find  out?  Interview  your  potential  boss 
as  he  is  interviewing  you.  Ask  about  his  workstyle 
and  seek  examples.  Probe  for  how  he’d  deal  with  eth¬ 
ically  dicey  situations.  Ask  about  “the  vision  thing” 
and  work/life  balance.  Figure  out  his  expectations 
for  you  in  the  first  30,  60  and  90  days.  The  answer 
will  tell  you  a  lot  about  his  understanding  of  IT. 

Find  people  who  have  worked  for  him  in  past  jobs; 
they  can  be  a  wealth  of  information.  Google  him  to 
dig  up  his  track  record.  Think  of  this  as  a  reference 
check.  A  potential  employer  will  do  one  on  you,  and 
it’s  fair  to  do  your  own  on  him. 

This  is  a  lot  of  work,  and  it’s  very  different  from 
the  usual  strategy  of  resume-polishing  and  interview 
posturing,  but  it’s  worth  it.  The 
best  boss  I  ever  had  knew  what 
IT  could  do  and,  better  yet, 
what  it  couldn’t  do.  He  had  a 
compelling  vision  for  the  compa¬ 
ny  and  IT’s  role  in  making  his 
vision  a  reality.  He  could  explain 
what  I  was  doing  and  why,  even 
in  the  most  intense  boardroom 
discussions.  He  had  high  ethics, 
we  respected  each  other.  I  also 
liked  him.  And  I  used  the  proc¬ 
ess  I’ve  just  described  to  find 
him. 

Do  your  homework,  and  you 
could  end  up  with  the  near-per¬ 
fect  boss.  Then  you  won’t  have  to 
tell  anyone  to  “take  this  job  and 
shove  it.”  ©  44304 


Lewis,  a  CIO  for  17  years,  is  the 
founder  and  senior  partner  of 
The  Edge  Consulting  Group  LLC 
in  Atlanta.  He  can  be  reached  at 
edgeconsulting@bellsouth.net. 


DUE  DILIGENCE 

*  Don’t  trust  the  human  resources 
department  to  tell  you  the  down-and- 
dirty  realities  of  the  job.  HR  has  a  mis¬ 
sion  to  accomplish:  Fill  the  position. 

■  Scour  the  Web  to  figure  out  what 
the  company  and  its  executives  are 
really  like. 

■  Figure  out  if  the  company  culture  is 
family-friendly  or  travel-intensive. 

Talk  to  internal  customers,  peers 
and  subordinates  to  find  out  what 
they  expect  from  a  CIO. 

■  Ask  your  stockbroker  to  help 
analyze  the  company. 

■  Look  at  the  company’s  products 
and  services.  Are  they  innovative  or 
passe?  Would  you  buy  them? 
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J.M.  Smucker  Board 
Elects  New  CIO 

Andrew  G.  Platt,  director  of  busi¬ 
ness  technology  at  The  J.M. 
Smucker  Co.,  has  been  elected  to 
vice  president,  information  services, 
and  CIO.  Platt  started  his  role  last 
week  at  the  Orrville,  Ohio-based 
company,  which  is  known  for  its 
fruit  spreads.  He  will  report  to  the 
company’s  vice  president  and  con¬ 
troller,  Richard  G.  Jirsa. 


Consultancy  Exec 
Now  State  CIO 

Lemuel  C.  Stewart  Jr.,  president  of 
Executive  Partners,  a  consultancy  in 
Glen  Allen,  Va.,  last  week  officially 
became  Virginia’s  new  CIO.  Stewart 
has  more  than  30  years’  experience 
in  IT,  including  executive  positions 
at  QuadraMed  Corp.  and  Trigon  Blue 
Cross/Blue  Shield  of  Virginia.  Dur¬ 
ing  his  five-year  term,  Stewart  will 
oversee  the  Virginia  Information 
Technologies  Agency.  His  responsi¬ 
bilities  will  include  consolidating  IT 
and  managing  nearly  $500  million 
in  annual  IT  investments. 


Video  Chain  Elevates 
IT  Entrepreneur 

Hollywood  Entertainment  Corp.  has 
promoted  F.  Bruce  Giesbrecht,  who 
entered  the  industry  in  the  1980s 
as  a  software  vendor  specializing  in 
video  systems,  to  president  and  chief 
operating  officer.  Giesbrecht  helped 
Hollywood’s  founder  and  CEO,  Mark 
Wattles,  open  his  first  store  in  1988 
and  has  worked  at  Hollywood  since 
1993,  when  he  was  CIO.  Giesbrecht 
most  recently  was  general  manager 
of  corporate  operations. 


Specialty  Insurer 
Promotes  IT  Exec 

RLI  Corp.,  a  Peoria,  lll.-based  insur¬ 
er  that  offers  specialty  property  and 
casualty  coverage  for  niche  mar¬ 
kets,  has  promoted  Piyush  K.  Singh 
to  CIO.  He  joined  RLI  in  1994  and 
has  been  vice  president  of  IT  since 
2000.  He  previously  worked  as  a  fi¬ 
nancial  services  consultant  at  Price 
Waterhouse  LLP. 
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The  Case  of  the 
MissHg  Mitrics 


Successful  outsourcing  efforts  require 
metrics  that  are  clearly  specified,  effectively 
monitored  and  consistently  correlated  to  the 
needs  of  the  business.  Good  metrics  support 
your  cost  and  service  goals  and  are  consistent 


with  your  culture.  Exam¬ 
ples  include  unit  costs  of  a 
service  (such  as  cost  per 
minute,  cost  per  help  desk 
call)  or  response  time  per 
event  (such  as  two  hours 
to  respond  to  a  PC  failure). 
Unfortunately,  many  out¬ 
sourcing  contracts  contain 
metrics  that  are  ineffective 
and  insufficient  [QuickLink 
38242.] 

But  even  a  contract  that 
specifies  excellent  metrics 
is  no  guarantee  of  success. 

Metrics  must  be  gathered, 
monitored  and  reviewed 
before  they  can  be  used  to 
improve  service.  In  many 
cases,  the  performance  data  is  never 
collected,  and  no  one  even  notices. 

Some  organizations  have  downsized 
so  much  over  the  past  several  years 
that  they  don’t  have  enough  people  to 
execute  the  measurement  processes 
specified  in  their  contracts.  Both  par¬ 
ties  are  frequently  guilty  of  not  fulfill¬ 
ing  their  sides  of  metrics  management. 

Unless  service  levels  become  intol¬ 
erable,  many  organizations  believe 
that  the  efforts  required  to  collect  and 
manage  the  performance  data  are  un¬ 
warranted.  This  can  be  a  costly  mis¬ 
take.  One  company  outsourced  desk¬ 
top  procurement  and  management  for 
30,000  desktops.  The  multiyear  con¬ 
tract  stated  that  as  the  PC  manufactur¬ 
er  lowered  prices,  the  outsourcer 
would  pass  those  reductions  on  to  the 
company.  But  the  customer  never 
checked,  and  the  outsourcer  kept  the 
difference.  The  company’s  failure  to 
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monitor  its  outsourcer  cost 
it  over  $1  million  per  year. 
Monitor  your  metrics  ef¬ 
fectively  by  taking  the  fol¬ 
lowing  steps: 

■  Assign  responsibility.  In  a 
surprising  number  of  cases, 
the  outsourcer’s  adherence 
to  the  terms  of  the  contract 
goes  unnoticed  and  un¬ 
checked  simply  because 
nobody  is  ever  assigned  to 
monitor  it.  The  neglected 
vendor  gets  a  free  ride  un¬ 
til  there’s  a  major  problem. 

■  Establish  consistent  met¬ 
rics.  Make  sure  your  organi¬ 
zation  and  your  outsourcer 
are  on  the  same  page.  One 

company  outsourced  one  of  its  four 
help  desks.  It  had  a  proprietary  system 
to  measure  help  desk  staff  productivi¬ 
ty.  The  company  wanted  to  continue 
to  compare  productivity  across  all  four 
help  desks,  but  the  outsourcer  used 
different  software.  Since  the  data  was 
not  comparable,  more  time  was  spent 
arguing  about  which  numbers  were 
correct  than  evaluating  productivity. 

■  Trust,  but  verify.  Don’t  rely  exclu¬ 
sively  on  the  metrics  provided  by  your 
outsourcer.  Even  if  it  produces  volumi¬ 
nous  reports,  your  organization  needs 
to  be  close  enough  to  the  metrics  to 
accurately  assess  their  validity. 

■  Review  metrics  jointly.  The  out¬ 
sourcer  will  be  more  motivated  to  col¬ 
lect  performance  data  if  it  knows  it 
will  be  held  accountable.  This  data 
forms  the  basis  for  enforcing  contract 
penalties  and  paying  incentives.  Con¬ 
duct  regular  review  meetings  with 


your  outsourcer,  and  use  this  forum  to 
create  a  joint  plan  to  improve  your 
outsourcer’s  service  levels. 

■  Reward  excellent  performance.  Before 
you  put  incentive  clauses  into  a  con¬ 
tract,  carefully  consider  whether  the 
benefits  of  better  service  outweigh  the 
additional  costs.  But  if  you  put  incen¬ 
tives  in  the  contract,  honor  them  with¬ 
out  fail.  Excellent  performance  that 
goes  unrecognized  isn’t  likely  to  recur. 
Even  if  the  contract  doesn’t  require  in¬ 
centive  payments,  reward  the  out¬ 
sourcer  in  some  manner.  Offer  to 
serve  as  a  reference  or  tell  the  out¬ 
sourcer’s  president  how  pleased  you 
are  with  its  performance. 

■  Listen  to  your  customers.  If  you’ve 
outsourced  a  customer-visible  func¬ 
tion  (such  as  the  help  desk),  the  out¬ 
sourcer’s  performance  is  often  the 
only  performance  your  customers  will 
see.  A  customer’s  perception  of  ac¬ 
ceptable  performance  is  as  valuable  as 
any  other  metric.  If  your  metrics  aren’t 
accurately  reflecting  the  needs  of  your 
customers,  re-examine  your  metrics. 

■  Create  a  metrics  management  process. 
It’s  crucial  to  re-evaluate  metrics  peri¬ 
odically  to  determine  if  they’re  meet¬ 
ing  the  changing  needs  of  your  busi¬ 
ness,  especially  in  long-term  contracts. 
No  contract  can  anticipate  every  con¬ 
tingency,  so  make  sure  it  specifies  a 
process  enabling  you  to  change  met¬ 
rics  as  your  business  evolves. 

Metrics  are  an  important  key  to 
leveraging  better  performance  from 
your  outsourcer.  But  to  be  effective, 
they  must  be  an  integral  part  of  both 
the  contract  and  the  ongoing  manage¬ 
ment  of  your  outsourcer.  If  you  don’t 
use  the  metrics  you  designed  and  ne¬ 
gotiated,  you’ll  get  the  performance 
you  deserve.  ©  44278 
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Full  time  Embedded  Database 
Systems  Administrator.  (Multiple 
Openings)  Responsibilities  in¬ 
clude:  develop,  implement,  mod¬ 
ify  and  maintain  customized 
embedded  databases  for  vari¬ 
ous  Mobile  Devices  and  estab¬ 
lish  data  communication  with 
AS/400,  SAP  R/3,  MS  SQL, 
Clarify  and  Microsoft  CRM  back 
office  systems;  ensure  consis¬ 
tent  functionality  in  the  databas¬ 
es  supporting  Heidelberg  Mobile 
Service  and  Heidelberg  Mobile 
Sales  global  applications;  estab¬ 
lish  and  administrate  data  pub¬ 
lishing  and  subscriptions  for 
Mobile  applications  using  Micro¬ 
soft  .NET  environment  and  XML; 
utilize  data  replication  tech¬ 
niques  for  Mobile  Devices;  fine 
tune  SQL  Servers  and  synchro¬ 
nization  parameters  for  data 
replication  performance;  and 
maintain  consistent  functionality 
in  the  databases  supporting 
Heidelberg  business  processes. 
Must  have  earned  a  Bachelor's 
Degree  in  Computer  Science, 
Computer  Information  Systems 
or  a  related  field.  If  interested, 
submit  resume  in  duplicate  to: 

do  Crawford  M.  Scott  for 

Heidelberg  USA,  Inc. 

1000  Gutenberg  Drive 

Kennesaw,  Georgia  30144 


Sr.  Systems  Analyst 

Implement,  develop  &  upgrade 
Oracle  Apps.  using  1 1  i,  OPM, 
GL,  PA,  OM,  AOL,  Forms, 
Reports.  Masters  degree  in 
Comp.  Sci.  or  Apps.  reqd.  Must 
have  two  yrs.  of  demonstrable 
prof,  exper.  using  Oracle  Appl. 
11i,  Techno/Functional  using 
OPM,  Oracle  Fin.,  Forms, 
PL/SQL  loaders,  TOAD  and 
Unix  Shell  Scripting.  Must  be 
willing  to  frequently  relocate. 
$66,550/yr.,  F/T,  hrs.  vary. 
Resumes  to  Site  Admin., 
Greene  Cty.  Careerlink,  4  W. 
High  St.,  Waynesburg,  PA 
15370-1324.  Reference  Job 
Order  #  388670. 


Technical  Support  Specialist. 
Analyze  &  coord  user  &  tech 
support  prgm;  test,  maintain, 
troubleshoot  s/ware,  h/ware  & 
n/work  using  Oracle8,  VB, 
MSAccess,  WinNT,  routers, 
switches  &  Unix;  provide  tech 
support/updates  to  users.  Reqd 
Bach  or  equiv  in  Comp  Sci/Engg 
or  related  Engg,  IT,  Business 
Admin/Mgmt.  2  yrs  exp  in  job 
offd  or  as  Systems/Software/IT 
profl  using  above  skills.  40hr/wk 
8a-5p.  Resume  to  New  Horizons 
Computer  Learning  Ctr,  445 
Dolley  Madison  Rd,  Green¬ 
sboro,  NC  27410. 


Looking  for 
a  new  career? 


The  new 
itcareers.com 
and 

CareersJournal.com 
combined 
jobs  database 
can  help  you  find 
one. 

Check  us  out  at: 
www.itcareers.com 

or  call  (800)  762-2977 


SYNAPSE  GROUP,  INC.,  a 

leading  computerized  magazine 
marketing  company,  is  looking  to 
hire  qualified  candidates  with,  at 
minimum,  a  Bachelors  degree  in 
Computer  Science,  Information 
Systems  or  it's  equivalent  plus 
two  years  of  experience  for  the 
following  positions: 

ASP  DEVELOPER  to  use  ASP, 
HTML  and  SQL  programs  to 
implement  new  systems  into 
several  multifunctional  tiers  to 
handle  data  processing,  data¬ 
base,  data  retrieval,  order  entry, 
report  generation  and  to  coordi¬ 
nate  changes  made  to  the  com¬ 
puter  databases  and  existing 
systems.  Two  years  experience 
in  the  job  offered  required  with 
sound  knowledge  of  ASP/ADO, 
VBSCRIPT,  SQL,  ORACLE, 
UNIX,  JAVA  AND  HTML. 

WEB  DEVELOPER  to  monitor, 
maintain  and  add  enhancement 
features  to  the  existing  database 
programs  and  to  design,  devel¬ 
op  and  create  internet  applica¬ 
tion  systems  that  handle  order 
entry,  database,  data  retrieval 
and  document  management. 
Two  years  of  experience  in  the 
job  offered  required  with  exten¬ 
sive  knowledge  in  the  manage¬ 
ment  and  designing  of  Database 
Systems,  Java,  JavaScript, 
HTML,  SQL,  ASP,  Front  Page, 
Sun  Solaris,  Windows  95/NT 
and  Oracle  Database. 

E-COMMERCE  DEVELOPER 

to  maintain  and  add  enhance¬ 
ment  features  to  the  computer 
database/systems;  to  design 
and  develop  E-Commerce  appli¬ 
cations  for  handling  order  entry, 
database,  data  retrieval,  report 
generation,  and  document  man¬ 
agement.  At  minimum,  Bach¬ 
elors  degree  in  noted  fields 
above  or  Business  Admin¬ 
istration  or  its  equivalent  plus 
two  years  of  experience  in  job 
offered  with  extensive  knowl¬ 
edge  of  JAVA,  ASP/ADO, 
VBSCRIPT,  SQL,  ORACLE, 
UNIX,  JAVA,  HTML,  WWW  and 
related  protocols. 

The  company  offers  a  competi¬ 
tive  compensation/benefit  pack¬ 
age  and  an  environment  where 
achievements  are  recognized  & 
professional  growth  is  encour¬ 
aged.  Qualified  applicants  are 
encouraged  to  mail  resumes  to: 
Dept,  of  Human  Resources, 
Synapse  Group,  Inc.,  Four  High 
Ridge  Park,  Stamford,  CT 
06905. 


Computers  -  Application  Engin¬ 
eers  needed.  Seeking  qual.  can¬ 
didates  possessing  BS  or  equiv. 
and/or  rel.  work  exp.  Part  of  the 
req.  rel.  exp.  must  include  2  yrs. 
working  with  SAS,  Oracle  & 
UNIX.  Duties  include:  Design  & 
develop  SAS  based  production 
applications  that  interface  with 
Oracle  database;  Monitor  &  plan 
database  file  size,  create  table 
partition  &  support  process  doc¬ 
umentation  for  production  appli¬ 
cations;  Work  with  Oracle  Enter¬ 
prise  Manager,  Oracle  Designer 
&  Visual  Source  Safe.  Fwd.  res¬ 
ume  &  ref.  to  Spectra  Marketing 
Systems,  Attn:  HR,  150  N. 
Queen  St.,  7th  Floor,  Lancaster, 
PA  17603. 


PROGRAMMER  ANALYSTS 
req'd  for  Chicago,  IL  office. 
Develop  &  maintain  software 
applications  using  VB,  VB.NET, 
Delphi,  SQL,  ASP.  VBScript, 
JavaScript,  XML;  Develop 
client/server  applications  in 
Oracle,  PL/SQL,  Developer 
2000  &  Designer  2000.  Bach¬ 
elors  or  equivalent  req'd  in  Com¬ 
puters,  Engineering,  Math  or 
related  field  of  study  +  2  yrs  of 
related  experience.  40  hrs/wk. 
Must  have  proof  of  legal  author¬ 
ity  to  work  permanently  in  the 
US.  Send  resume  to  HR 
Manager,  Masterminds  Global 
Solutions,  LLC,  6000  Fairview 
Road,  #1200,  Charlotte.  NC 
28210. 


SUMMIT 


HR  Summit  2004 

Hyatt  Regency  Chesapeake  Bay  Golf  Resort  &  Spa  |  Cambridge,  MD 
February  22-24,  2004 

"you  ean  design  and  create. 


In  order  to  maintain  a 
corporate  culture,  the 
realization  becomes 
apparent  for  the 
imperative  need  for 
technology  assistance 
and  new  solutions. 

r 

marcii  evans 


and  build  the  most  wonderful  place 
in  the  world.  But  it  requires 

to  make  It  a  reality." 

Walt  ©isncy 


Come  and  see  Keynote  Presenters  Cheryl  Moore,  VP, 
Organization  Development  and  Training,  WellPoint 
Health  Networks  and  Philip  Harlow,  Chief  Diversity 
and  Employee  Advocacy  Officer,  Xerox  Corporation 

at  the  2004  HR  Summit. 


Find  out  more  about  attending  TODAY! 

Visit  www.humanresourcessummit.com 


marcus 


summits 


DATABASE  ENGINE  DESIGN¬ 
ER/D  EVE  LOPE  R-Quantit- 
atively-based  Financial  Manage¬ 
ment  firm  seeks  Database 
Engine  Designer/  Developer. 
Duties  include  development  and 
maintenance  of  proprietary 
database  engines,  databases 
for  Company's  computer-  driven 
trading  systems  and  supporting 
accounting  systems  (including 
equities,  options  and  futures 
databases),  reporting  programs 
and  utilities.  PH.D.  in  Computer 
Science  required.  Will  accept 
candidates  with  Master's  degree 
and  two  years  experience  in  job 
duties.  Salary  according  to 
experience.  Mail  resume  to: 
RTC;  600  Route  25A,  East 
Setauket.  NY  11733,  Attn:  RM 


Programmer/Analyst  -  to  ana¬ 
lyze,  design,  develop,  test,  sup¬ 
port  &  maintain  computer  pro¬ 
grams/  systems  for  the  sales 
mgt./  inventory  control  of  6-8 
retail  stores.  Req:  Bach,  degree 
(or  foreign  equiv)  in  Comp.  Sci., 
an  Engg.  discipline,  or  closely 
related  field,  w/2  yrs.  exp.  in  job 
offered  or  in  the  design  &  devel¬ 
opment  of  computer  programs/ 
systems.  Hrs:  8a-5p.  M-F. 
Comp,  salary/benefits.  Resume 
to:  Lalit  Patel,  Pres.,  Raj 
Enterprises  of  Sarasota.  Inc., 
3246  17th  St..  Sarasota,  FL 
34235. 


WEB  DEVELOPMENT 
ANALYST  III 

ADT  Security  Services,  Inc.  has 
multiple  openings  in  Boca 
Raton,  Florida  for  Web  Develop¬ 
ment  Analysts  III. 

Analyze  business  procedures 
and  problems  to  develop  specifi¬ 
cations  and  convert  them  to  pro¬ 
grammable  form  for  electronic 
data  processing.  Confer  with 
organizational  units  involved  to 
determine  specific  web  output 
requirements.  Study  existing 
data  systems  to  evaluate  effec¬ 
tiveness  and  develop  new,  or 
modify  current,  web  systems  to 
improve  production  workflow. 

Must  possess  at  least  a  bache¬ 
lor’s  or  its  equivalent  in  Com¬ 
puter  Science  or  a  related  field, 
and  relevant  work  experience. 
Experience  must  include  J2EE 
Certification  (Sun  Microsystems, 
etc.);  web  development  experi¬ 
ence,  including  Electronic  Data 
Interchange  (EDI);  and  experi¬ 
ence  with  Oracle,  SQL, 
WebSphere  Administration  and 
XSLT. 

Resume  and/or  cover  letter 
must  reflect  each  requirement 
above  and  specify  reference 
code  WDA/SSS  or  it  will  be 
rejected. 

Forward  resume  to  Theresa 
Maia.  ADT  Security  Services, 
Inc.,  One  Town  Center  Road, 
Boca  Raton,  FL  33486. 


Software  Engineer  (Appl¬ 
ications).  Sought  by  Englewood 
Colorado  consulting  company. 
Duties:  To  work  in  various  unan¬ 
ticipated  locations  throughout 
the  U.S  Duties:  Under  direct 
supervision,  develop,  create  and 
modify  general  computer  appli¬ 
cations  software  or  specialized 
utility  programs.  Analyze  user 
needs  and  develop  software 
solutions.  Design  software  or 
customize  software  for  client  use 
with  the  aim  of  optimizing  opera¬ 
tional  efficiency.  Analyze  and 
design  databases  with  an  appli¬ 
cation  area.  Use  of  DB2, 
COBOLII,  CICS,  VSAM,  ADW, 
JCT,  UNIX,  Windows  NT  and 
SQL.  Reqs.  Masters  or  equiva¬ 
lent  in  Computer  Science, 
Computer  Engineering,  Elec¬ 
tronics  and  Communication 
Engineering  or  related  field. 
Plus  1  year  in  the  job  offered  or 
1  year  in  a  related  occupation, 
including  Computer  program¬ 
mer,  Assistant  Systems  Analyst 
or  Programmer  Analyst. 
$73, 230.75/year,  40/hrs/wk, 
8AM-5PM.  Respond  by  resume 
to  WORKFORCE  DEVELOP¬ 
MENT  PROGRAMS,  PO  Box 
46547,  Denver,  CO  80202,  and 
refer  to  Job  Order  No. 
C05066223. 
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STRATEGIC  FINANCIAL  /  e- 
BUSINESS  ANALYST  -  A 

Boston-area  company  engaged 
In  state-of-the-art  records,  data, 
and  information  management, 
has  an  immediate  need  for  two 
(2)  highly  skilled  Strategic 
Financial  /  e-Business  Analysts. 
These  senior  project  /  team 
leader-level  positions  involve  the 
formulation,  development,  and 
organization-wide  deployment  of 
complex  integrated  Oracle  e- 
Business  implementations  of 
both  highly  customized  and  ven¬ 
dor  application  software  for  tran¬ 
saction  processing,  "OFA"  deci¬ 
sion  support  systems,  and  data 
warehousing.  This  position  also 
will  be  responsible  for  financial  / 
business  analysis,  strategy,  and 
software  applications  architec¬ 
ture,  and  day-to-day  hands-on 
project  management.  Minimum 
educational  requirements  in¬ 
clude  a  Bachelor's  degree  in  Fi¬ 
nance,  Financial  Management, 
Information  Systems  Manage¬ 
ment,  or  similarly  relevant  major. 
Minimum  professional  require¬ 
ments  include  Oracle-conferred 
Enterprise  Resource  Planning 
("ERR")  Masters  Certification  in 
Oracle  Financials.  Minimum 
experience  required  is  seven  (7) 
years  of  relevant  experience  (or 
a  relevant  Master’s-level  pro¬ 
gram  and  5  years  experience 
may  be  substituted  in  lieu  of  7 
years  experience)  involving  the 
business  analysis  of  computer- 
based  financial  and  accounting 
systems,  at  least  three  (3)  years 
of  which  specifically  involved 
both  internal  and  external  audit¬ 
ing.  Specifically  required  is  the 
demonstrated  ability  to  formu¬ 
late  an  implemented  eBusiness 
technology  strategy.  Also  re¬ 
quired  is  the  demonstrated  abili¬ 
ty  to  design  and  implement  an 
eBusiness  infrastructure  within 
an  Oracle  financial  application 
suite  using  UML  design  tools. 
Additionally  required  is  the 
demonstrated  ability  to  generate 
software  development  method¬ 
ologies  compliant  with  the  Soft¬ 
ware  Capability  Maturity  Model 
("SW-CMM"™),  and  to  develop, 
document  and  present  policies 
and  implementation  methodolo¬ 
gies  for  business  systems  devel¬ 
opment.  Further  required  is  the 
demonstrated  ability  to  design, 
code  and  configure  in  Oracle 
Financial  Analyzer  (OFA)  and 
Oracle  Express  Server  (OES) 
and  design  and  implement 
Oracle  General  Ledger  integra¬ 
tion  with  a  multi-country  OFA 
financial  budgeting  application. 
Finally  required  is  the  demon¬ 
strated  ability  to  design  sophisti¬ 
cated  analytical  reports  in 
Oracle  Discoverer  and  Oracle 
Developer  2000  using  Oracle 
PL/SQL,  XML,  and  UNIX.  Start¬ 
ing  salary  Is  $  91,000  per  year, 
together  with  a  complete  bene¬ 
fits  package  includes  contributo¬ 
ry  medical,  dental,  full  life,  AD&D 
coverage,  STD,  LTD  and  two 
weeks  earned  time  off,  401  (k) 
plan,  and  other  industry-compet¬ 
itive  benefits.  Qualified  appli¬ 
cants  respond  with  two  (2)  cop¬ 
ies  of  resume  only  to:  Case  # 
200203481,  Labor  Exchange 
Office,  19  Staniford  Street,  1st 
Floor,  Boston,  MA  02114.  An 
EOE/MFHV. 


Marketing  Specialist  needed. 
Perform  market  research  & 
develop  marketing  strategies  to 
increase  sales  and/or  market 
share  for  all  services;  determine 
most  effective  market  research 
methods  to  track  demographic  & 
market  trends;  implement  mar¬ 
keting  studies,  analyze  results  & 
develop  marketing  strategies; 
formulate  short/long  term  mar¬ 
keting  goals;  maintain  relation¬ 
ships  with  other  areas  of  the 
organization  to  track  effective¬ 
ness  of  existing  marketing  pro¬ 
grams  May  participate  in  the 
devlpmt.  of  new  products  &  ser¬ 
vices,  &  determine  new  markets 
in  which  to  compete.  Req. 
Bachelor's  Degree  in  Business 
Admin.  &  min.  4  yrs.  exp.  in  mar¬ 
ket  analysis  and/or  market 
research  as  well  as  exper.  writ¬ 
ing  market  research  reports. 
Req  solid  computer  skills,  ind. 
Word,  Excel,  Access,  Power¬ 
Point. 

Must  be  available  to  work  from 
our  Amherst,  NH  office.  Please 
submit  resumes  to  Auriga,  Inc., 
Attn:  HR,  One  Overlook  Drive, 
Unit  2,  Amherst  NH  03031  or 
kbutt@auriga.com. 


Information  Systems  -  West 
Marine,  the  nation's  largest  spe¬ 
cialty  retailer  of  boating  supplies, 
has  an  opening  for: 

Sr.  Network  Manager  - 

Engineering  &  Design 
Responsibilities  include  design, 
engineering,  and  project  man¬ 
agement  for  entire  network,  data 
center  and  telephony  infrastruc¬ 
ture.  Switching/routing  infra¬ 
structure,  LAN/WAN,  PBX/ 
Voicemail/ACD/Call  Center  sys¬ 
tems,  B2B  connectivity,  network 
security  infrastructure,  SOHO / 
Remote  access,  data  center  ser¬ 
vers  and  storage  solutions,  Intel 
based  NOS  and  directory  tech¬ 
nologies  (Novell/Microsoft), 
email/messaging,  and  corporate 
B2E  and  B2B  Web/Portal  infra¬ 
structure.  Main  focus  is  on  IT 
capital  projects.  Position  re¬ 
quires  strong  project  mgt,  tech¬ 
nical/network  design  skills,  and 
demonstrated  ability  to  manage 
a  team  of  engineers. 

Ideal  candidate  will  have  7+  yrs 
IS  exper,  3+  yrs  in  a  mgt  role, 
exper  with  250+  users,  demon¬ 
strated  ability  to  manage  pro¬ 
jects  with  budgets  of  S300K.  BS 
degree  in  engineering,  computer 
science,  engineering  or  related 
field  or  equivalent.  CCDP/CCNP 
/CCIP  preferred.  MCSE  or  CNE 
and  PMP  a  plus.  Send  resume 
to:  jobs@westmarine.com  or  fax 
831-761-4136.  EOE. 


Seeking  qualified  applicants  for 
the  following  positions  in  Mem¬ 
phis,  TN:  Operations  Research 
Analyst.  Using  operations  re¬ 
search  methods,  analyze  broad 
and  complex  corporate  prob¬ 
lems/projects.  Requirements: 
master's  degree  or  equivalent* 
in  operations  research,  applied 
mathematics,  engineering  or 
other  quantitative  field  plus  1 
year  of  experience  in  systems 
analysis,  engineering,  applied 
mathematics  or  related  field. 
Education  and/or  experience 
must  have  included:  develop¬ 
ment  of  optimization  models; 
development  of  heuristic  algo¬ 
rithms  using  C  and/or  C++;  and 
development  of  statistical  mod¬ 
els  using  Minitab.  *Ph.D.  in 
appropriate  field  will  offset  expe¬ 
rience  requirement.  Submit  res¬ 
umes  to  Michael  Umlauf, 
Federal  Express  Corporation, 
3680  Hacks  Cross  Road,  H- 
2220,  Memphis,  TN  38125. 
EOE  M/F/DA/. 


Certified  Technical  Instructor. 
Must  have  Bachelor’s/equiv.  in 
related  field  and  should  hold  a 
minimum  of  4  or  more  of  premi¬ 
um  IT  certifications  such  as 
Oracle  Certified  Professional  - 
(Certified  DBA/Certified  Devel¬ 
oper),  Microsoft  Certified  Sys¬ 
tems  Engineer  in  Windows  2000 
or  Windows  2003,  Microsoft 
Certified  Database  Administra¬ 
tor,  Certified  Novell  Engineer 
and  should  also  be  a  current 
Microsoft  Certified  Trainer. 
Develop  and  conduct  programs 
to  train  students  of  computer 
learning  centers  in  course 
instruction,  including  advanced 
training  in  Microsoft  and  Oracle 
products.  40  hrs/wk,  8:30AM- 
4:30PM.  Competitive  Salary. 
Send  resume  to:  New  Horizons, 
ATTN:  HR,  4053  Lavista  Rd„ 
Tucker,  GA  30084. 


Applications  Programmer  Ana¬ 
lyst  Specialist,  Rockville,  MD, 
WyStar.  Define  &  dvlp.  software 
appl.  Reqs.  BA  in  MIS, 
Computer  Science  or  Elect.  & 
Computer  Eng.  &  2  yrs.  exp.  as 
a  Developer,  Prog.,  Prog. 
Analyst.  The  2  yrs.  reqd.  exp. 
must  inch  work  w/  daily  401  (k) 
Record  Keeping  &  Daily  Trading 
appl.  systems,  Windows  NT  & 
Digital  UNIX,  Sybase,  MS 
Access,  C,  C++,  Java,  Java 
Script,  HTML,  VB,  VB  Script, 
SQL,  SQR,  PVCS,  CAST,  & 
Unix  Shell  scripting.  40hrs/wk, 
M-F,  Send  resume  &  cvr.  Itr.  to 
John  A.  Craft.  WyStar,  9210 
Corporate  Blvd.,  Ste.  300, 
Rockville.  MD  20850.  No 
Phone  Calls. 


Software  Professionals: 

RS  Software,  a  leading,  global¬ 
ly  positioned  software  develop¬ 
ment  &  consulting  firm  needs 
software  professionals  with 
exp.  in  the  following  skill  mixes: 
Systems  Analysts:  Oracle,  Unix, 
SQL  Server,  MPEX,  MVS  &  DB2 
Programmer  Analysts:  Asse¬ 
mbler,  C,  C++,  TPF  &  Windows. 
Business  Systems  Analysts: 
Requirement  Analysis,  market¬ 
ing  of  customer  specific  IT  solu¬ 
tions,  liaise  between  multination¬ 
al  clients  &  IT  professionals, 
preparation  of  project  plans  & 

technical  proposals,  assess 

customer  satisfaction.  IT- 

Technical  Services  Coord¬ 

inators:  Liaise  with  in-house  IT 
directors  &  with  the  directors  of 
the  consulting  services  at  multi¬ 
national  clients  to  coordinate  & 
optimize  IT  services  &  minimize 
aggregate  IT  operational  costs 
through  appropriate  triangula¬ 
tion  of  in-house  contractors, 
domestic  outside  &  overseas 
out-source.  Undertaking  of 
major  infrastructures,  IT  devel¬ 
opments  &  modifications  & 
update  technical  innovations. 
Send  resume  to:  HR,  RS 
Software  (I)  Ltd.  1900  McCarthy 
Blvd.,  #  103  Milpitas,  CA  95035 


Software  Engineer  (Des 
Monies):  Research,  design  & 
dev  computer  software  syst  in 
conjunction  with  hardware  prod¬ 
uct  development.  Consult  with 
hardware  eng  &  other  eng  staff 
to  evaluate  interface  between 
hardware  &  software,  &  opera¬ 
tional  &  performance  require¬ 
ments  of  overall  system.  Provide 
technical  guidance  on  client  pro¬ 
jects.  Will  use  VB,  Oracle,  C, 
C++,  Java,  PeopleSoft,  Unix, 
SQL  Server,  Win  NT  etc.  Req'd 
Masters  in  CS,  Eng,  Math,  or 
MIS,  2  yrs  exp  in  job  or  Prog 
Analyst  or  Systems  Analyst  or 
Bach's  with  5  yrs  as  Prog 
Analyst  or  systems  analyst.  40 
hr/wk,  mon-fri,  9. am  to  5  pm 
$80.000/yr.  Must  have  proof  of 
legal  authority  to  work  in  the 
United  States.  Send  your 
resumes  to  Iowa  Workforce 
Center,  215  Watson  Powell  Jr, 
Way,  Des  Moines,  Iowa  50309. 
Please  refer  to  Job  Order 
IA1101849.  Employer  paid 
advertisement. 


Programmer.  Analyze,  design, 
develop,  test  and  implement 
specialized  business  apps.  in 
Business  Objects  Ver.  5.1,  Web 
Intelligence  and  related 
Business  Objects  products,  RSA 
Bsafe  SDK,  VBA,  ASP,  Oracle 
and  related  RDBMS  and  related 
tools.  $55,000/Yr.;  40  Hours  Per 
Week/No  OT;  Mon.-Fri.  (8  AM-5 
PM);  Need  to  have  a  B.S./B.A. 
(Or  Foreign/Functional  Equiv.)  in 
Science/Engg./Bus.  Admin,  with 
2  yrs.  exp.  in  job  offered. 
Employer  is  a  software  consult¬ 
ing  company  and  job  duties  will 
be  performed  in  Rutland, 
Vermont  and  various  client  sites 
throughout  the  USA.  Send 
resumes  to  Job  No.  612545,  PO 
Box  488,  Montpelier,  VT  05601- 
0488. 


Sr.  Systems  Analyst 

Design,  develop  programs  using 
Data  warehousing  concepts  and 
datamodeling.  Masters  degree 
in  Comp.  Sci.  or  Apps.  reqd. 
Must  have  two  years  of  demon¬ 
strable  prof,  exper.  using  and 
Datastage  4. 0/5.0,  relational 
databases,  Teradata/Oracle/ 
SQL  Server,  Datamodeling  with 
Erwin,  OLAP  tools,  OLAP  Tools 
Microstrategy,  Actuate,  ETL 
Tools,  Informatica  5. 1/6.1  on 
platforms  Win  NT,  Solaris  and 
HP-UX.  Must  be  willing  to  fre¬ 
quently  relocate.  $66,550/yr., 
F/T,  hrs.  vary.  Resumes  to  Site 
Admin.,  Greene  Cty.  Careerlink, 
4  W.  High  St.,  Waynesburg,  PA 
15370-1324.  Reference  Job 
Order  #  388667. 


Web  Developer:  Research,  de¬ 
sign,  develop,  test,  implement 
and  support  company’s  web 
applications  and  databases  us¬ 
ing  Dreamweaver,  Authoware  & 
MS  Frontpage.  Elevate  the  cap¬ 
abilities  of  web-related  systems 
to  support  business  process 
improvements;  assure  the  web 
applications  meet  company’s 
standards,  security,  and  legal 
requirements.  Participate  in  gen¬ 
eral  systems  maintenance,  and 
technical  administration  of  the 
applications.  Req.  Bachelor’s 
degree  or  equivalent  in  Comput¬ 
er  Science  with  proficiency  in 
ASP,  Visual  Basic  and  SQL. 
Must  be  Microsoft  Certified  Sys¬ 
tem  Engineer.  40  hours/week,  9 
to  5.  Contact  Mandarin  Antiques, 
Inc.  700  Miami  Circle  NE, 
Atlanta,  GA  30324. 


Information  Technology 

ECOMXE,  Inc.,  has  multiple 
Information  Technology  Officer/ 
Specialist  positions  avail,  in  its 
Irvine,  California  office.  Respon¬ 
sible  for  managing  information 
systems  for  its  multi-national 
customers  and  internal  comput¬ 
ing  resources.  The  successful 
candidate  will  have  a  bachelor's 
degree  and  have  at  least  5  years 
experience  in  data  exchange 
languages  used  in  grocery/retail 
industries.  This  is  a  manage¬ 
ment  level  position  and  the 
incumbent  should  have  at  least 
3  years  managerial  experience. 
Please  send  your  resume  and 
credentials  to  Human  Resourc¬ 
es,  ECOMXE,  Inc.,  2091  Busin¬ 
ess  Center  Drive,  Suite  100, 
Irvine,  CA  92612. 


PROGRAMMER  ANALYST/ 
SOFTWARE  ENGINEERS 

Several  Sr.  &  Mid-level  posi¬ 
tions  available  for  qualified  can¬ 
didates  possessingMS/BS  & 
relevant  work  experience.  Work 
W/COBOL,  JCL,  VSAM,  DB2, 
CICS,  ORACLE,  JAVA,  SERV¬ 
LETS,  XML,  EJB,  C++,  VC++, 
SYSTEM  ADMIN,  DBA's,  SAP, 
Seibel,  Peoplesoft  &  Technical 
Recruiters. Please  mail  resume 
to  Attn:  HR  Dept.,  Lancesoft, 
Inc.,  1  New  Hampshire  Avenue, 
Suite125,  Portsmouth,  NH 
03801. 


Software  Developer  -  Use  SI 
corp  standard  dev  tools  &  pro¬ 
ject  method  to  develop,  install  & 
test  solutions  to  specific  user 
tech  &  bus.  problems  within  con¬ 
text  of  SI  Bank,  CRM,  Insur¬ 
ance  &  Support  products  using 
OOP/A/D,  SQL,  Java  &  ESQL. 
Req.  BS  CS,  Engg  or  related; 
2yrs  exp  as  s/w  engg  to  include 
OOP/A/D,  Java,  SQL,  ESQL. 
Transact-SQL,  DHTML,  ASP  & 
Crystal  Reports.  Travel  up  to 
75%.  Perm  US  workers  only. 
Resume  to  J.  Leonard  (REF: 
SDJ),  SI  Corp,  2815  Coliseum 
Centre  Dr,  Ste  300,  Charlotte, 
NC  28217. 


DP  Powerhouse  looks  for  SAW  & 
IT  engineers  (BS  with  lyr  exp)  to 
develop  COM+  components 
using  SQL,  ADO  &  stored  proce¬ 
dures,  Oracle/SQL;  create  web 
based  Admin  Tool;  use  Java, 
XML,  ASP,  C++,  COM+,  VB, 
SQL,  IIS,  Access  &  Oracle. 
Please  contact : 
jobs@dppinc.com.  EOE 

System  Analyst  or  Software 
Engineers  wanted  by  Mobics,  a 
small  but  stable  company.  Job 
duties  include:  work  on 
Java/Script,  JSP,  Servlets,  Unix, 
Oracle.  Travel  maybe  required. 
Min  qualification  is  BS+exp. 
Competitive  wage  with  full  bene¬ 
fits.  Please  apply  at : 
info@mobics.com.  EOE. 


Programmer  Analyst  (Des 
Monies):  design,  dev  &  imple¬ 
ment  customized  software  pro¬ 
grams  for  industrial,  high  tech, 
advanced  financial,  business  & 
Scientific  applications.  Will  use 
Java,  EJB,  MQ  Series,  MQSI,  C, 
C++,  VB,  Oracle,  Websphere, 
OS/390,  J2EE,  Cobol,  CICS, 
DB2,  JCL,  Win  NT,  Unix,  IBM 
Mainframes.  ASP,  SQL  Server 
etc.  Req'd  Bach's  in  CS,  Eng, 
Math,  or  MIS,  2  yrs  exp  in  job  or 
Systems  Analyst.  40  hr/wk, 
mon-fri,  9  am  to  5  pm. 
$65.000/yr.  Must  have  proof  of 
legal  authority  to  work  in  the 
United  States.  Send  your 
resumes  to  Iowa  Workforce 
Center,  215  Watson  Powell  Jr. 
Way,  Des  Moines,  Iowa  50309. 
Please  refer  to  Job  Order 
IA1101848.  Employer  paid 
advertisement. 


Management  Business  Analyst, 
Wachovia  Corp.  Analyze  user  & 
bus.  reqs.  &  engage  in  project 
planning  systems  analysis  & 
design,  &  system  configuration 
mgmt.  for  securities  processing 
systems  on  the  basis  of  portfolio 
management  accounting  &  sec¬ 
urities  lending  system  expertise. 
Reqs.  MA  in  Bus.  Admin.,  Fi¬ 
nance,  or  Info.  Systems  &  3  yrs. 
exp.  in  the  job  offd.  or  3  yrs.  exp. 
as  a  Systems  or  Programmer 
Analyst.  The  3  yrs  of  reqd.  exp. 
must  incl.  work  w/  appl.  dvlp. 
using  SQL  Server  2000  or  equiv. 
and  Java,  VB,  and  COBOL  and 
must  incl.  working  w /  investment 
accounting  and  securities  char¬ 
acteristics  valuation  fundamen¬ 
tals.  40  hrs/wk,  M-F,  Send  res¬ 
ume  and  cvr.  Itr.  to  Michelle 
Eyink,  11440  San  Vicente  Blvd., 
3rd  Floor,  Los  Angeles,  CA 
90049.  No  phone  calls  please. 


Innovative  Consulting  is  looking 
for  program  or  system  analysts, 
IT  engineers.  Candidate  must 
have  BS/MS  degree.  Travel  is 
required  for  some  positions. 
Skills  in  C/C++,  VB,  Oracle, 
SQL,  SAP,  WebSphere,  Java 
are  plus.  Good  salary.  Please 
send  resumes  to  info@icscor- 
pusa.com.  EOE 

CMS  (Customer  Management 
Systems)  has  openings  for 
experienced  IT  professionals  to 
provide  full  life  cycle  IT  &  busi¬ 
ness  solutions  to  clients. 
Qualifications  include  BS  with 
experience  using  SQL,  EJB, 
JSP,  UML,  OOP/OOD,  Lotus, 
Java,  VB,  etc.  Apply  at 
cms@earthdome.com.  EOE.  No 
calls. 


Solution  Architect  wanted 
for  computer  s/w  and  relat¬ 
ed  prof,  services  co. 
Requires  M.S.  in  C.S.,  E.E. 
or  related  engg.  or  tech, 
field  plus  3  yrs.  exp.  with 
Jyacc  Jam/Prolifics,  Scribe 
SQR,  Oracle  PL/SQL,  IBM 
Web  Development  Tools, 
multiplatform  Windows/Unix 
env.  Send  resume  to  H.R. 
Dept.,  ViryaNet,  Inc.,  2 
Willow  Street,  South- 
borough,  MA  01745. 


Synergetics  Incorporated  seeks 
an  Application  Developer 
(Programmer/Analyst)  to  work  in 
Fort  Collins,  CO  and  other  unan¬ 
ticipated  job  sites  in  the  U.S.  to 
design,  develop,  implement,  and 
maintain  ERP  software  systems 
and  data  warehouses.  Req¬ 
uirements  include  a  Bachelor's 
degree  in  computer  science  or  a 
related  field;  Two  years  of  expe¬ 
rience  designing  and  developing 
ERP  software  applications; 
Working  knowledge  of  Data 
Warehousing,  Informix,  JAVA, 
OOP  and  XML.  Respond  via 
resume  to  Bonnie-Lee  Bowman, 
Synergetics  Inc.,  1520  S. 
College  Ave.,  Fort  Collins,  CO 
80524  and  refer  to  4356TP. 


Computer  Professionals  (pro¬ 
grammer,  system  analyst,  soft¬ 
ware  or  project  engineers)  want¬ 
ed  E-Con.  Candidates  must 
have  minimum  BS  or  equivalent 
degree  with  IT  experince.  Use 
Weblogic  6.0  Application  server, 
Java  Servlets,  XML.  Please 
send  resumes  to:  hrd@goe- 
con.net.  EOE.  No  calls. 

Programmer/System  Analyst  or 
Software  Engineers  wanted  by  I- 
ntigrators,  LLC.  Perform  NT, 
UNIX  and  SQL  Server 
Database  administration,  use 
SunOne  Iplanet  4. 1/6.0,  RSA 
Cleartrust  4.0/5.0,  Websphere. 
Min  qualification  is  BS+exp. 
Please  apply  at  rory- 
goldson@hotmail.com. 
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SENIOR  PROGRAMMER/ANA¬ 
LYST  to  analyze,  design,  devel¬ 
op,  test,  enhance  and  maintain 
client/server  and  web-based  ap¬ 
plication  software  using  C,  C++, 
Java,  Visual  Basic,  Servlets, 
JSP,  Oracle,  VBScript  and 
HTML  on  Windows  2000/NT 
platforms.  Require:  Bachelor’s 
degree  (or  equivalent)  in  Comp¬ 
uter  Science/Engineering,  Math¬ 
ematics,  or  a  closely  related  field 
with  2  yrs  of  exp  in  the  job 
offered  or  as  an  IT  Analyst;  Each 
3  yrs  of  progressively  responsi¬ 
ble  work  exp  in  the  field  will  be 
considered  equivalent  to  1  yr  of 
college  education.  Extensive 
travel  on  assignment  to  various 
client  sites  within  the  US  is 
required.  Competitive  salary 
offered.  Send  resume  to:  John 
Watson,  Venturi  Technology 
Partners,  9428  Baymeadows 
Rd,  Ste  500,  Jacksonville,  FL 
32256;  Attn:  Job  VK. 


SENIOR  DATABASE  PRO¬ 
GRAM  ME  R/ANALYST-Los 
Angeles.  Administer,  coordinate 
&  maintain  databases  &  related 
systems  in  connection  w/direct 
to  consumer  marketing  activities 
of  worldwide  developer  of  inter¬ 
active  games  &  education  soft¬ 
ware.  Bach  in  comp  sci., 
mechanical  engg,  or  info  sci.  +  3 
yrs  exp.  in  job  offered  or  3  yrs 
exp.  with  database  analysis, 
programming  &  design.  Must  be 
proficient  with  E-Piphany  & 
SQL.  Send  resume  &  letter  to 
Human  Resources  attn  SDPA- 
Vivendi  Universal  Games,  Inc., 
6080  Center  Dr.,  Los  Angeles, 
CA  90045. 


COMPUTERS  -  Sr.  Software 
Consultants  needed.  Seeking 
qual.  cand.  possessing  MS/BS 
or  equiv.  and/or  rel.  work  exp. 
Part  of  the  exp.  must  include  2 
yrs.  working  with  network 
administration  &  1  yr.  working 
with  Unix  system  administration, 
Visual  Basic  &  ASP.  (Exp.  can 
be  simultaneous).  Duties  in¬ 
clude:  Design,  develop  &  imple¬ 
ment  IBM  Websphere  software 
products  &  systems;  Work  with 
Visual  Basic,  ASP,  Javascript, 
HTML,  MQ  Series  &  Net.Data. 
Fwd.  resume  &  ref.  to:  e- 
Emphasys  Tech.,  Attn:  HR,  2401 
Weston  Pkwy,  #101,  Cary,  NC 
27513. 


Programmer  Analyst 

Develop  and  analyze  employee 
job  tracking  system  and  work 
order  dispatch  system  using 
MOV  architecture,  struts  frame 
work,  EJB  technology  and  3-tier 
system.  Req.  M.S.  in  Comp. 
Sci.  ora  related  field,  1-yrexp.  in 
software  development  and  profi¬ 
ciency  in  Java,  EJB,  iMWork 
and  iMField.  40hrs/wk.  Send 
resume  and  cover  to  Mr.  Oday 
Mickel,  OMSYS  Services,  Inc. 
1309  ST.  John's  Bluff  Rd.  N  #8, 
Jacksonville,  FL  32225.  Fax: 
904-646-4701. 


Network  Administrator  sought 
for  nonprofit  social  svcs  agency. 
Job  in  Tampa,  FL.  Install,  config¬ 
ure  &  maintain  org's  Citrix 
Metaframe  XPe  Network  &  infra¬ 
structure.  Maintain  network 
h/ware  &  s/ware.  Monitor  n/work 
to  ensure  n/work  availability  to 
all  system  users  &  perform  nec¬ 
essary  maintenance  to  support 
n/work  availability.  Perform  sys¬ 
tem  maintenance  &  backup  of 
data  servers.  Admin  &  support 
server  systems  &  supporting 
s/ware.  Install  &  maintain  fire¬ 
wall,  security  &  communications 
eqpmt.  Acquire  bids  for  svcs  & 
h/ware  &  order  eqpmt  for  branch 
installations  &  other  large  IT  pro¬ 
jects.  Admin  IT  n/work.  Provide 
technical  &  systems  expertise  to 
IT  technicians.  Oversee  data 
entry  of  membership,  contributor 
&  prgm  info.  Maintain  eqpmt 
inventory,  devices  &  channels. 
Must  have  Bach  or  equiv  in  any 
field  +  2  yrs  exp  in  job  offd  or  in 
Info  Systems/Technology,  or 
computer  related  field.  Respond 
to  HR  Dept,  Tampa  Metropolitan 
Area  YMCA,  110  E.  Oak  Ave, 
Tampa,  FL  33602. 


Software  Developer  to  analyze, 
design,  develop  appls  including 
IP  appls  using  ASP,  ASP.NET, 
VB.NET,  HTML,  Java,  Java¬ 
Script,  VC++  , VB.COM,  Oracle 
9i,  PL/SQL.  XML,  XPATH,  XML- 
DOM,  WEBDav,  IIS  5.0,  SOAP 
etc;develop  data  aware  security 
model  using  Oracle  XML  DB 
running  Java  External  Routines 
on  Oracle  9i  in  conformance 
with  XACML  1 .0  standards;  write 
components  for  establishing 
asynchronous  data  transfer 
using  MSMQ;  co-ordinate  with 
offshore  development  team  and 
provide  end  user  training. 
Require  a  B.S.  or  foreign  equiv 
in  CS/Engg  (any  branch)  with  3 
yrs  expin  IT.  High  salary.  F/T. 
Travel  involved.  Resume  to 
HR, Triton  Information  Tech¬ 
nologies,  Inc,  501  Silverside 
Road,  Suite  139,Wilmington,  DE 
19809. 


Technical  Support  Specialists: 

assign  and  coordinates  work 
projects;  establish  work  priorities 
and  evaluate  cost  and  time  re¬ 
quirements;  review  and  test  pro¬ 
grams  to  ensure  compliance 
with  specifications  and  stan¬ 
dards;  evaluate  and  test  vendor- 
supplied  software  packages  to 
determine  compatibility  with 
existing  systems;  maintain  com¬ 
pany  network  system  and  web¬ 
site,  process  e-commerce.  Req. 
BS  or  equivalent  in  CS  with  9 
months  exp.  in  job  offered  or  as 
Technical  Support  Engineer, 
proficiency  in  Java,  JSP,  ASP, 
HTML,  MS  Access,  TCP/IP,  net¬ 
work  HW/SW  installation,  con¬ 
figuration.  and  troubleshooting. 
40hr/wk,  11-7.  Contact  recruiter 
GinStar  Computers,  Inc.  6000 
Dawson  Blvd.,  Suite  A-D 
Norcross,  GA  30093. 


Bioinformatics  Computational 
Scientist:  Dvlp  &  support  applies 
for  nucleic  acid  sequence  sec¬ 
ondary  structure  prediction, 
exact  +  approx  pattern  match¬ 
ing,  microarray  dsgn  &  espres- 
sion  profile  analysis,  +  other 
sequence  based  data  analysis, 
stat'l  inference,  +  high  through¬ 
put  bioinformatics  problems. 
Support  legacy  code  base  in 
COBOL,  FORTRAN  &  Pascal  in 
Unix  envrmt  integrating  w/RDB 
backend.  Use  PERL,  bioPERL, 
C,  C++  Java  &  bioJAVA  to  dvlp 
computational  algorithms,  data 
mining  &  applic  integration  for 
nucleotide  sequence  analysis. 
Input  sequence  data  w/other 
biological  info  for  formulating 
testable  hypotheses  for  diverse 
computational  projects.  Dvlp  & 
test  hypotheses  for  genomic 
data  using  in  silico  methods. 
Dsgn  +  apply  novel  computa¬ 
tional  methods,  algorithms  & 
stat'l  approaches  for  analyzing 
low  signal  pattern,  polymor¬ 
phism  &  divergence  in  biological 
sequence  info,  &  for  making  pre¬ 
dictive  molecular  bio  tools.  Musi 
have  BA/BS  in  Bioinformatics, 
Comp  Sci  or  related  field. 
40hr/wk  9-5,  $49K/yr.  Must  have 
6  mos  exp  in  position  offd  or  as 
Bioinformatics  Applications 
Developer.  Relevant  6  mos  exp 
must  incl  6  mos  exp  in  each  of 
the  following  (exp  may  run  con¬ 
currently):  computational  algo¬ 
rithms  in  bioinformatics  +  high 
throughput  data  anlaysis  pro¬ 
jects,  public  available  d/bases  & 
analysis  in  bioinformatics,  mod¬ 
ern  molecular  bio  &  genetics  lab 
techniques,  &  prgmg  PERL,  C, 
C++  &  Java  in  heterogeneous 
computing  envrmt  (incl  Unix  & 
Win)  or  w/clustered  computing 
envrmt.  Must  have  proof  of  legal 
auth  to  work  in  US.  Send 
resume  to  IA  Workforce  Center, 
1700  S.  1st  Ave,  Ste  11B,  IA 
City,  IA  52244-2390.  Ref.  JO# 
IA1 101816.  Employer  paid  ad. 


Software  Engineer  (Des 
Monies):  Research,  design  & 
dev  computer  software  syst  in 
conjunction  with  hardware  prod¬ 
uct  development.  Consult  with 
hardware  eng  &  other  eng  staff 
to  evaluate  interface  between 
hardware  &  software,  &  opera¬ 
tional  &  performance  require¬ 
ments  of  overall  system.  Provide 
technical  guidance  on  client  pro¬ 
jects.  Will  use  Oracle,  Win  NT, 
Unix,  Java,  SAP,  SAS,  Informix, 
HP-Unix,  EMC  8730,  HP-9000. 
Req'd  Bach's  in  CS,  Eng,  Math, 
or  MIS,  5  yrs  exp  in  job  or  Prog 
Analyst  or  IT  Consultant  or 
Masters  with  2  yrs  as  Prog 
Analyst  or  IT  Consultant.  40 
hr/wk,  mon-fri,  9. am  to  5. pm 
$80.000/yr.  Must  have  proof  of 
legal  authority  to  work  in  the 
United  States.  Send  your 
resumes  to  Iowa  Workforce 
Center,  215  Watson  Powell  Jr. 
Way,  Des  Moines,  Iowa  50309. 
Please  refer  to  Job  Order 
IA1101850.  Employer  paid 
advertisement. 


Director  of  Information 
Technology  Systems/CIO 
$100,000+ 

A  challenging  executive  position 
is  available  for  an  experienced 
professional  to  direct  the  infor¬ 
mation  technology  operations  of 
the  Liquidation  Bureau  of  the 
State  of  New  York  Insurance  De¬ 
partment.  The  Liquidation  Bur¬ 
eau  discharges  the  obligations 
of  the  Superintendent  of  Insur¬ 
ance  imposed  by  Articles  74  and 
76  of  the  New  York  Insurance 
Law  and  carries  out  the  Super¬ 
intendent's  duties  as  the  court- 
appointed  statutory  receiver  of 
insurance  companies. 

As  Director  of  ITS/CIO.  the  se¬ 
lected  individual  will  develop, 
implement,  and  enforce  strate¬ 
gic  policies  and  procedures  to 
provide  innovative  technical  re¬ 
sponses  to  the  business  needs 
of  the  Liquidation  Bureau  and 
the  insurance  companies  placed 
in  rehabilitation  or  liquidation 
pursuant  to  orders  issued  by  the 
New  York  State  Supreme  Court. 

Qualified  candidates  will  pos¬ 
sess  a  Bachelor's  Degree  in  a 
related  discipline;  a  related  pro¬ 
fessional  designation  or  gradu¬ 
ate  degree;  and/or  management 
experience  at  the  policymaking 
level  for  a  combined  total  of  15 
years.  Progressively  responsible 
leadership  in  management  sys¬ 
tems/information  technology  at 
an  insurance/reinsurance  or  fi¬ 
nancial  services  entity  is  essen¬ 
tial,  as  are  superior  communica¬ 
tion  and  interpersonal  skills. 
Knowledge  of  insurance  and  liq¬ 
uidation  law  and  familiarity  with 
the  practices  and  procedures  of 
the  National  Association  of 
Insurance  Commissioners  with 
respect  to  multi-state  insolven¬ 
cies  would  be  beneficial. 

We  offer  extensive  benefits  and 
a  salary  commensurate  with  ex¬ 
perience.  Please  fax  resume 
with  salary  requirements  to  212- 
349-5810  or  e-mail  to  gcaporino 
@nylb.org. 

Equal  Opportunity  Employer 
M/F/DA/. 


Oracle  DBA  to  administer,  moni¬ 
tor,  troubleshoot  Oracle  data¬ 
bases  in  prod,  dev,  test,  data 
WH.  VLDB,  Oracle  9i/8i,  HP-UX, 
Solaris  &  Windows  setup.  Admin 
Oracle  Apps  1 1  i/1 0.7,  SAP 
4.X/3.1  &  PeopleSoft  8.X/7.52 
databases.  Upgrade  Oracle 
Apps  &  HP  Omniback.  Backup  & 
recovery  using  RMAN,  HP 
Omniback,  BMC  SQL  backtrack. 
Disaster  recovery.  Performance 
tuning  using  OEM,  Statspack, 
Tkprof,  BMC  SQL  navigator, 
TOAD.  UNIX  admin.  Assist  Java 
developers.  24x7  oncall  support. 
Implement  replication,  OPFS, 
standby  DBs  &  OPS.  Stored 
procs.  packages,  triggers  in 
PL/SQL.  Shell  scripts.  Develop 
forms6i,  reports6i  &  Crystal 
Reports.  DB  Design  &  data  mod¬ 
eling.  DB  security  admin.  MS  in 
CS  or  eq  +  2  yrs.  exp  in  job. 
Comp  salary.  Apply  to:  Netserv, 
6580  Jimmy  Carter  Blvd. 
Norcross  GA  30071  with  proof  of 
permanent  work  authzn. 


IT  Education  &  Training  Directory 


Contact  the  companies  listed  below 
to  help  you  with  your  training  needs! 


To  place  your  ad  please  call  800-762-2977 


IPexpert,  Inc. 

(866)  225-8064 

www.ipexpert.com 

CCIE  (R&S,  SEC,  and  C&S),  CCSP, 

CCNP,  CCNA,  IP  Telephony 


CBT  Nuggets 

(888)  507-6283  &  (541)  284-5522 
www.cbtnuggets.com 
Affordable  training  videos  on  CD 
MCSE,  MCDBA,  MCSD,  CCNA, 
Citrix,  Linux,  A+,  Net  + 
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Network  Sys.  Analyst  I  &  Sys. 
Analyst  I  (Mult.  Openings.  Travel 
&  Relocate  frequently)-  Analyze, 
test,  design  &  evaluate  network 
systems.  Analyze  user  req,  pro¬ 
cedures  &  problems  to  automate 
processing  or  improve  existing 
comp,  systems.  Test,  analyze  & 
evaluate  h/w  and  s/w  to  deter¬ 
mine  efficiency,  reliability  &  com¬ 
patibility  w/existing  sys.  Req. 
competence  in  all  phases  of  sys¬ 
tem  analysis,  structures,  tech¬ 
niques  &  mgmt  practices  of  1  or 
more  areas,  maintains/modifies 
complex  sys  to  develop  new 
subsys  such  as  integrated  pro¬ 
duction  scheduling,  inventory 
control,  cost  analysis,  sales 
analysis.  Upgrades  sys  &  cor¬ 
rects  errors  to  maintain  sys. 

Must  have  B.S.  degree  and  2 
years  exp.  as  Computer  prof.  & 

2  yrs  of  exp.  using  3  of  A,  3  of  B, 

3  of  C  or  4  of  D: 

A) .  CDMA.  WCDMA,  IP-Based 
BSS,  Cadence  Spectra  Quest 
SI  Expert,  Mentor  Graphics, 
Synopsys,  Cadence  Spectra 
Quest  Power  Integrity,  Cadence 
Allegreo  -  Mentor  Graphic 
Board  Station. 

B) .  Oracle,  SAP,  SQL  Server 

C) .  IPSwitch,  3Com,  ADSL, 
DSLAM,  Cisco. 

D) .  Cobol,  CICS,  DB2,  JCL, 
VSAM,  Informix,  Solaris,  AIX, 

C,  C++,  HTML.  DHTML,  Java. 
TCP/IP,  Powerbuilder,  Unix, 

CGI,  Linux,  Sun,  Cisam. 

Salary-  $59K-65K/yr.  Resumes: 
Iowa  Wrk  Force  Ctr,  800  7th  St, 
SE,  Cedar  Rapids,  Iowa  52406. 
Job  Order  #1101867,  1101847/ 
1101868,  1101843,  1101846, 
1101845,  1101840,  and 

1101841. 


Softprojex,  Inc.  is  hir¬ 
ing  all  levels  of  Pro¬ 
grammer/Analysts, 
System  Analysts  and 
Software  Engineers. 
Send  resume  to 
2900  Gordon  Ave, 
#202  Santa  Clara, 
CA  95051,  Attn:  S. 
Thomas.  May  be 
placed  at  client  sites 
nationwide. 


PROGRAMMER/ANALYST 

Design,  develop  and  test  various 
applications  using  the  following 
tools  and  technologies:  ASP, 
VB,  JAVA,  XML,  Microsoft.NET, 
HTML,  Javascript,  VSS,  PVCS, 
Oracle,  PLSQL,  SQL  server, 
ODBC,  COGNOS,  Visual  Studio, 
IIS,  Weblogic,  Winrunner.  8:00 
a.m.  to  5:00  p.m.,  $55, 000/year, 
Bachelor's  degree  or  equivalent 
in  Computer  Science  or  Engin¬ 
eering.  Two  years  experience  in 
job  offered.  Must  have  proof  of 
legal  authority  to  work  in  the 
United  States.  Send  your  res¬ 
ume  to  the  Iowa  Workforce  Cen¬ 
ter,  590  Iowa  Street  Dubuque,  IA 
52004-0757.  Please  refer  to  Job 
Order  #IA1101838.  Employer 
paid  advertisement. 


Experienced  Systems  An¬ 
alysts  will  use  a  variety  of 
tools  including  Oracle,  Java, 
SQL  Server,  VB,  Crystal 
Reports,  SAP,  HTML  & 
Sybase.  Bachelor's  degree 
or  foreign  edu.  equiv.  +  1  yr 
exp  rqd.  Travel  reqd.  Send 
confidential  rdsumd  and 
salary  requirements  to: 
Indus  Consultancy  Services, 
Inc.,  Ref.  FL,  140  E. 
Ridgewood  Ave,  Paramus, 
NJ  07652.  Visit  our  website 
at  www.Lndcon.com. 


Technical  Recruiter  to  source, 
screen,  interview  and  hire  soft¬ 
ware  professionals  in  e- 
Business,  internet,  client/server, 
CRM/ERP  and  other  areas  to 
provide  application  integration 
and  project  management  ser¬ 
vices.  Responsible  for  full  life- 
cycle  recruiting.  Hiring  candi¬ 
dates  in  the  US  and  internation¬ 
ally  in  skills  like  Siebel,  ATG 
Dynamo,  Weblogic,  WebSphere 
and  Blue  Martini.  Understand 
and  qualify  client  requirements 
and  find/match  candidates 
against  those  requirements. 
Requirements:  Bachelor's  Deg¬ 
ree,  educational  or  functional  (3 
yrs  experienced  yr  college) 
equivalent  and  three  years  rele¬ 
vant  experience,  multi-cultural 
recruiting  experience,  technical 
background,  familiarity  with 
industry,  technical  issues  and 
software  terminology.  Salary: 
$65, 374/year.  Working  Cond¬ 
itions:  8:00  A.M.  to  5:00  P.M.,  40 
hours/week,  International  travel 
is  required.  Apply:  BECS/ 
CareerLink  Program  Supervisor, 
Indiana  County  CareerLink,  300 
Indian  Springs  Road,  Indiana. 
PA  15701,  Job  No.  WEB388677. 


Enterprise  Solutions,  Inc.  also 
dba  Enterprise  Resources,  Inc. 
is  hiring  all  levels  of  tech  and 
nontech  staff  at  our  offices  in 
Santa  Clara,  CA  and  Glen  Ellyn, 
IL.  Open  positions  and  general 
job  duties  incl/not  ltd  to:  Pro¬ 
grammer/Analysts  -  develop/ 
code/test  applications;  Software 
Engineers  -  analyze/design/ 
develop/implement/customize 
applications;  Hardware  Engin¬ 
eers;  system  Analyst  -  Analyst 
user/sys  req/prepare  specs/doc¬ 
ument;  network  admin.  And  Mar¬ 
ket  Research  Analysts  -  analyze 
market  &  data/dev  market  plans, 
etc.  Send  resumes  to  799  Roo¬ 
sevelt  Road,  Bldg  3,  Suite  209A, 
Glen  Ellyn,  IL  60137  or  see  our 
website  at  www.enterprisesolu 
tioninc.com.  May  be  placed  at 
client  site  nationwide. 


Satyam  Computer  Services, 
Ltd.,  seeks  compu  proff  &  IT 
Bus.  Devlp.  Mgrs(BDM).  For 
our  Prog/Analysts,  DBA,  Sys 
Analysts,  Bus.  Sys.  Analysts, 
Qual.  Eng,  &  Softw,  Eng. 
Require  a  BS  degree  or  higher 
in  a  rel  field  &  relev  industry  exp. 
Also  recruiting  for  IT  BDM  to 
mnge  all  aspects  of  sales/bus. 
dvlpmnt  for  the  comp  mnftrg 
sys/industries.  Exp.  in  IT,  Eng, 
ERP,  &  six  sigma  processes. 
Our  BDM  positions  require  a  BS 
degree  in  MIS  or  eng.  or  bus. 
admin/mrktg  &  significant  exp.  in 
relat  positions  such  as  Tech. 
Mrktg  Mgr.  or  Sales/IT  Mgr.  All 
positions  subject  to  relocation  to 
various  sites  throughout  the  US. 
Qualif  applica  send  resume  to: 
SCS,  Attn  HR,  8500  Leesburg 
Pike,  Suite  202,  Vienna,  VA 
22182,  or  email  to 
resumeus@satyam.com. 


Software  engineer  to  design,  de¬ 
velop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  de¬ 
sign;  direct  software  system 
testing  procedures  using  exper¬ 
tise  in  Qualifile,  ChexSystems 
and  FraudFinder.  Requirements: 
Bachelor's  Degree  or  equivalent 
in  Computer  Science  or  related 
field  and  two  years  experience 
as  a  software  engineer  or  com¬ 
puter  programmer,  knowledge  of 
Qualifile,  ChexSystems  and 
FraudFinder.  Salary:  $70,242/ 
year.  Working  Conditions:  8:00 
A.M,  to  5:00  P.M.,  40  hours/ 
week,  involves  extensive  travel 
and  frequent  relocation.  Apply: 
BECS  /  CareerLink  Program 
Supervisor,  Indiana  County 
CareerLink,  300  Indian  Springs 
Road,  Indiana,  PA  15701,  Job 
No.  WEB390222. 


Consultant.  Design,  develop, 
test  &  implement  systems  appli¬ 
cations  for  business  clients 
using  IBM  mainframe  & 
midrange  technologies  as  well 
as  object-oriented  methodolo¬ 
gies.  Perform  systems  analysis. 
Document  systems.  Tools: 
Mainframe  Assembler;  Natural/ 
Adabas;  COBOL;  EntireX; 
CICS;  JCL;  REXX;  ASP;  DB2; 
Endevor.  Bachelor’s  in  Comp. 
Sci."  plus  6  mo.  exp.  in  job 
offered  or  as  Software  Eng. 
req  d.  Prior  exp.  must  include: 
Natual/Adabas;  COBOL; 

EntireX.  (‘Will  accept  Bachelor’s 
in  any  eng.  field).  40  hrs/wk, 
$41,892/yr.  Must  have  proof  of 
legal  authority  to  work  in  the  US. 
Send  your  resume  to  the  Iowa 
Workforce  Center,  800  7th 
Street  SE,  Cedar  Rapids,  IA 
52406-0729.  Please  refer  to  Job 
Order  IA1101839.  Employer  pd 
ad. 


Satya  Marg  Solutions  Inc, 
Londonderry,  NH  needs  experi¬ 
enced  Programmer  Analysts 
having  a  Bachelors  degree  or 
equivalent  with  two  years  of 
progressive  work  experience  in 
client  server  technologies, 
developing  software  applica¬ 
tions  using  Oracle  SQL  Server, 
VC++,  VBASP,  Developer  2000, 
and  Java.  Knowledge  of  Micro- 
soft.Net  technologies  is  a  plus. 
40  hour  week,  M-F,  competitive 
salary  and  benefits.  Apply  with 
resume  to:  Satya  MargSolutions 
Inc.,  HR  Department,  75  Gil- 
creast  Rd,  Office  14,  Suite  200, 
Londonderry,  NH  03062. 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design,  develop,  main¬ 
tain  and  test  RTOS  using  C++, 
Java,  Rational  Rose  and  UML 
tools  on  UNIX  and  Windows 
platforms;  Mentor  junior  pro¬ 
grammers  and  engineers.  Re¬ 
quire:  M.S.  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  or  a  closely  related  field 
with  two  years  of  experience  in 
the  job  offered.  Competitive 
salary  offered.  Apply  by  resume 
to:  Bhavin  Kusal,  Popular  Tech, 
250  Parkway  Dr.,  Ste.  150, 
Lincolnshire,  IL  60069-4340; 
Attn:  Job  KM. 


I  want  a  qualified 
IT  professional 
in  my  staff’s 
high-performance 
work 

environment 


The 

IT  Careers  Network 
will  focus  and  direct 
your  message  to  IT's 
most  impressive  audience 
—  the  experts  who  are 
helping  business  to 
succeed. 


Post  open  positions 
online  or  in  print. 
Call  (800)  762-2977 


www.itcareers.com 


is  the  place  where  your 
fellow  readers  are  getting 
a  jump  on  even  more  of 
the  world's  best  jobs. 

Now  combined  with 
CareerJournal.com, 
you  have  more  jobs 
to  choose  from. 

Stop  in  for  a  visit  and 
see  for  yourself  at: 

www.  itcar  eer  s  .com 
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Amex  Offshore 

against  disclosing  such  infor¬ 
mation.  What’s  clear  is  that 
some  IT  employees  within 
Amex  are  disturbed  by  what 
they  understand  to  be  a  major 
offshore  shift. 

“They  qualify  as  one  of  the 
Benedict  Arnold  companies 
exporting  jobs  overseas  that 
[presidential  candidate]  John 
Kerry  has  been  talking  about,” 
said  a  current  Amex  employ¬ 
ee,  who  spoke  on  condition  of 
anonymity. 

According  to  the  former 
Amex  IT  employee,  most  of 
the  offshore  work  “is  likely  to 
go  to  India  because  they  al¬ 
ready  have  staff  there.”  How¬ 
ever,  he  said  that  Accenture 
Ltd.,  which  is  in  a  long-term 
IT  outsourcing  deal  with 
Amex,  is  subcontracting  a  por¬ 
tion  of  the  development  work 
to  Chinese  IT  agencies.  Com- 
puterworld  was  unable  to  cor¬ 
roborate  that,  however,  and 
Accenture  didn’t  respond  to 


requests  for  comment  by  press 
time. 

According  to  Avivah  Litan, 
an  analyst  at  Gartner  Inc.  in 
Stamford,  Conn.,  Amex  is  in¬ 
deed  looking  to  expand  its  off¬ 
shore  software  development. 

“This  is  the  IT  development 
and  maintenance  staff  for 
their  credit  card  stuff,  includ¬ 
ing  risk  management,  charge- 
back  and  all  the  applications 
associated  with  that,”  Litan 
said.  “It’s  going  to  make  every¬ 
one  [in  Amex’s  IT  depart¬ 
ment]  really  nervous.  It’s  very 
scary  to  the  employees. 

“The  reason  people  at  Amer¬ 
ican  Express  are  so  scared  to 
tell  the  IT  employees  that  they 
may  lose  their  job  is  those  em¬ 
ployees  can  wreak  havoc  with 
the  systems,”  Litan  said. 

Maintaining  a  Mix 

Tony  Mitchell,  a  spokesman 
for  Amex,  said  he  couldn’t  dis¬ 
close  any  plans  for  IT  layoffs, 
either  short  or  long  term. 
Mitchell  said  he  wasn’t  per¬ 
mitted  to  discuss  details  about 
Amex’s  plans  for  offshore  out¬ 


sourcing  or  its  contracts  with 
vendors,  but  he  did  say  that 
Amex  isn’t  shifting  the  amount 
of  offshore  outsourcing  the 
company  performs. 

“We’ve  had  a  fairly  steady 
number  of  employees.  That 
work  gets  supplemented  by 
third-party  providers.  At  any 
given  point  in  time,  there  can 
be  a  shift  in  the  mix  in  terms 
of  who  and  where  that  appli¬ 
cation  development  work  is 
getting  done,”  he  said. 

Amex  has  long  used  off¬ 
shore  services  to  expand  its 
global  reach  and  flexibility  in 
developing  new  products. 

“Certainly  cost  is  a  factor, 
but  we’re  not  going  to  sacri¬ 
fice  service,  quality  and  effi¬ 
ciency  for  cost,”  Mitchell  said. 
“Of  course,  people  have  differ¬ 
ent  feelings  and  thoughts 
about  it,  but  our  employees 
know  that  our  objective  is  for 
the  company  to  grow  overall 
both  in  the  U.S.  and  outside 
the  U.S.,  which  in  the  end  ben¬ 
efits  not  only  our  sharehold¬ 
ers,  but  also  our  business  and 
employees  as  well.” 


HThe  reason 
people  at 

American  Express 
are  so  scared  to  tell 
the  IT  employees 
that  they  may  lose 
their  job  is  those 
employees  can 
wreak  havoc  with 
the  systems. 

AVIVAH  LITAN,  GARTNER  INC. 

Since  1994,  Amex  has  oper¬ 
ated  its  Financial  Center  East 
in  New  Delhi.  It’s  one  of  the 
company’s  three  major  trans- 
action-processing  centers.  The 
other  two  are  in  Phoenix  and 
the  U.K. 

“Having  people  who  are  ca¬ 
pable  of  doing  work  around 
the  world  we  think  gives  us 
greater  flexibility  to  meet  our 
technology  demands,  and  we 
also  think  it’s  consistent  with 
serving  a  global  customer 
base,”  Mitchell  said. 


Amex  is  following  an  off¬ 
shore  outsourcing  trend  that 
has  emerged  in  the  financial 
services  sector  and  in  other 
industries.  Gartner  predicts 
that  by  the  end  of  this  year, 
one  in  every  20  U.S.  IT  jobs 
will  have  moved  offshore. 

“All  the  New  York  banks  and 
brokerages  have  been  doing 
this.  First  Data  Corp.  has  out¬ 
sourced  most  of  its  develop¬ 
ment  to  India.  They’re  upgrad¬ 
ing  the  entire  credit-card- 
processing  platform  there,” 
Litan  said. 

A  spokeswoman  for  First 
Data  declined  to  comment  on 
the  bank’s  offshore  outsourc¬ 
ing  plans. 

James  Beams,  an  analyst  at 
Financial  Insights  in  Framing¬ 
ham,  Mass.,  said  that  while  he 
hadn’t  heard  of  any  specific 
plans  by  Amex  to  expand  its 
offshore  outsourcing,  it  would 
not  surprise  him. 

“It’s  a  megatrend.  The  ques¬ 
tion  would  be,  ‘Why  are  they 
doing  such  a  small  fraction  of 
it  right  now  overseas?’  ”  Beams 
said.  ©  44543 


«l  don’t  think 
we’ve  fac¬ 
tored  [the  weak 
U.S.  dollar]  into  our 
decision-making, 
since  the  differen¬ 
tial  in  [U.S.  and 
Indian  labor  costs] 
is  so  dramatic. 
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Weak  Dollar 

his  offshore  services  company  will 
absorb  the  financial  impact,  and 
he  expects  competition  to  keep 
other  Indian  firms  from  raising 
prices,  at  least  for  now.  “Compa¬ 
nies  are  not  taking  the  risk  of  go¬ 
ing  back  to  their  customers”  to 
renegotiate  contracts,  Kumar  said. 

But  Indian  service  providers 
may  not  hold  back  for  long.  Users 
of  offshore  services,  which  are  typ¬ 
ically  contracted  in  U.S.  dollars, 
may  see  price  increases,  along 
with  contracts  that  share  the  risks 
and  rewards  of  currency  changes, 
outsourcing  consultants  said. 

Mike  Murphy,  an  attorney  at 
Shaw  Pittman  LLP  in  Los  Angeles 
who  represents  buyers  of  offshore 
services,  said  the  margin  pressures 
facing  Indian  suppliers  will  likely 
lead  to  increased  rates.  But  users 


may  have  choices,  he  said.  Some 
contracts  may  carry  higher  labor 
rates  but  lock  those  rates  in  for  a 
defined  period  of  time.  Another 
model  may  give  users  the  lowest 
competitive  rate  upfront  but  include 
a  formula  for  adjusting  those  rates 
in  response  to  currency  and  infla¬ 
tion  changes,  Murphy  said. 

Lance  Travis,  an  analyst  at  AMR 
Research  Inc.  in  Boston,  said 
many  Indian  IT  shops  have  been 
trying  to  raise  their  fees  recently, 
in  part  to  offset  exchange-rate  dif¬ 
ferences.  But  they  haven’t  had 
much  luck,  he  said,  largely  be¬ 
cause  competition  in  India  is  fierce 
and  the  U.S.  economic  recovery  is 
still  in  its  early  stages,  giving  Indi¬ 
an  firms  little  leverage. 

Differences  in  exchange  rates 
haven’t  been  on  the  radar  screens 
of  IT  managers  such  as  Jean 
Davis,  senior  executive  vice  presi¬ 
dent  of  IT,  e-commerce  and  opera¬ 
tions  at  Wachovia  Corp.  “I  don’t 


JEAN  DAVIS,  WACHOVIA  CORP. 

think  we’ve  factored  [the  weak 
U.S.  dollar]  into  our  decision¬ 
making,  since  the  differential  in 
[U.S.  and  Indian  labor  costs]  is  so 
dramatic,”  she  said.  The  Charlotte, 
N.C.-based  financial  services  com¬ 
pany  has  a  handful  of  “small”  proj¬ 
ects  in  India,  Davis  said. 

But  the  issue  is  likely  to  get 
more  attention.  The  dollar  is  down 


13%  since  early  2002  when 
weighted  against  all  currencies, 
said  James  Glen,  a  senior  econo¬ 
mist  at  Economy.com  Inc.  in  West 
Chester,  Pa.  This  change  varies  by 
country:  Weighted  against  the  In¬ 
dian  rupee,  the  dollar  is  down 
7.5%  since  2002,  but  against  the 
Canadian  dollar,  it  has  dropped  a 
whopping  18%. 

Curtis  Helsel,  vice  president  of 
data  and  technology  management 
at  the  University  of  Colorado  Foun¬ 
dation  in  Boulder,  turned  to  near¬ 
shore  service  provider  Center- 
Beam  Inc.  last  year  to  manage  the 
group’s  infrastructure  and  help 
desk  support.  The  foundation’s 
operations  are  managed  at  Cen- 
terBeam’s  facility  in  Saint  John, 
New  Brunswick,  under  a  three- 
year  agreement. 

Helsel  said  he  has  two  concerns: 
how  the  long-term  exchange  trend 
might  affect  his  contract  renewal 
price,  and  whether  it  could  lead  to 


cost-cutting  actions  by  the  provider 
and  potentially  affect  the  founda¬ 
tion’s  service  levels. 

Keith  Roberts,  chief  financial  of¬ 
ficer  at  San  Jose-based  Center- 
Beam,  said  the  currency  impact  is 
minimal  and  won’t  affect  services. 
U.S.  companies  don't  send  work 
to  Canada  primarily  because  of  the 
currency  rate  but  rather  because 
of  other  factors,  such  as  a  talent¬ 
ed,  lower-cost  workforce  and  low¬ 
er  real  estate  prices,  Roberts  said. 
But  if  the  currency  trend  were  to 
continue,  the  company  might  ap¬ 
ply  “hedging”  strategies,  such  as 
buying  Canadian  dollars  in  ad¬ 
vance  of  a  laic  increase,  he  noted. 

If  the  U.S.  dollar  continues  its 
decline  -  and  Glen  said  he  believes 
that  will  be  the  long-term  trend  - 
offshore  vendors  may  be  inclined  to 
begin  sharing  the  risks  and  rewards 
of  currency  fluctuations  with  their 
customers,  outsourcing  consul¬ 
tants  said.  ©  44601 
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Teach  Your  Users 


MIKKO  HYPPONEN  has  lost  faith  in  educating  users 

about  worms  and  viruses.  “It  never  helps;  people 
will  never  learn. . . .  They  will  click  on  everything,” 
Hypponen  told  the  Reuters  news  service  last  week. 
“We  really  have  to  take  security  to  a  higher  level 
and  take  the  responsibility  away  from  the  users.” 

Hypponen’s  despair  is  understandable.  He’s  director  of  antivirus 
research  at  Finnish  security  vendor  F-Secure  Corp.  He  had  spent  the 
previous  week  watching  the  Mydoom  worm  do  its  work. 

He’s  right:  Educating  users  about  viruses  isn’t  working. 


Trouble  is,  there  really  isn’t  anything  better. 

Actually,  virus  education  used  to  work  pretty 
well.  It  consisted  of  telling  users,  “A  virus  can 
wipe  out  everything  on  your  hard  disk.”  Those 
10  words  got  their  attention  and  convinced 
them  of  the  value  of  antivirus  software  and  safe 
computing  practices  all  at  once.  The  threat  of 
total  annihilation  will  do  that. 

What  changed?  Users  didn’t  really  get  dumb¬ 
er.  Virus  writers  got  smarter.  They  stopped  cre¬ 
ating  worms  that  erase  hard  disks  and  destroy 
data.  To  the  half-million  or  so  small-business 
and  home  users  whose  PCs  were  infected  by 
Mydoom,  the  worst  that  happened  was  that 
their  Internet  connections  were  a  little  slow. 

The  threat  —  to  them  —  was  gone. 

The  result?  Those  Mydoom-infected  PCs 
formed  a  huge  denial-of-service  gun  aimed 
directly  at  SCO.com.  When  the  trigger  was 
pulled,  SCO.com  was  blown  off  the  Web.  That 
wasn’t  just  a  threat;  it  was  a  thoroughly  success¬ 
ful  DoS  attack.  And  now  that  Mydoom  has 
proved  the  concept  with  SCO.com,  anyone 
could  be  next. 

So,  what  can  we  do?  Can  we  take  it  up  a  level 
so  we  don’t  have  to  worry  about  educating 
hopeless  users? 

Let’s  see.  What  if  Microsoft  bun¬ 
dled  antivirus  software  with  its  op¬ 
erating  systems,  provided  free 
virus-definition  updates  and  even 
made  the  updates  automatic?  Then 
all  those  users  would  be  protected. 

But  it  would  require  that  a  con¬ 
victed  monopolist  roll  over  the  en¬ 
tire  antivirus  industry.  And  antitrust 
issues  aside,  would  Microsoft  donate 
the  ongoing  cost  of  virus  research 
and  all  the  bandwidth  required  to 
regularly  push  virus  definitions  to 
hundreds  of  millions  of  Windows 


users?  Bill  Gates  isn’t  that  kind  of  philanthro¬ 
pist.  And  if  users  don’t  see  a  threat,  they  won’t 
pay  for  it. 

Let’s  try  again.  Anyone  connected  to  the  In¬ 
ternet  must  have  an  Internet  service  provider. 
Should  ISPs  automatically  scan  all  Internet  traf¬ 
fic  for  viruses?  That  piles  a  big,  expensive  pro¬ 
cessing  load  on  ISPs,  along  with  a  load  of  legal 
liability.  It’s  already  a  low-margin  business;  ISPs 
aren’t  going  to  take  on  huge  extra  costs  and 
risks  voluntarily.  They  can’t  afford  to. 

How  about  virus  filtering  at  the  Internet  back¬ 
bone?  Not  a  chance  —  it’s  ISP  economics,  but 
with  a  cost  that’s  orders  of  magnitude  greater. 

OK,  what  about  a  law  that  requires  every  PC 
to  have  antivirus  protection?  Good  luck  enforc¬ 
ing  it  —  scofflaws  already  ignore  far  more  criti¬ 
cal  legal  requirements.  Besides,  who’s  going  to 
notice  that  a  user  has  no  virus  protection  unless 
there’s  a  Mydoom-like  outbreak?  And  if  there  is, 
who’s  going  to  single  out  one  user  in  500,000 
for  legal  action? 

Even  if  big  corporations  subsidized  antivirus 
software  for  home  users,  there  would  still  be 
plenty  of  users  who  just  wouldn’t  bother  to  in¬ 
stall  and  update  it  if  they  didn’t  see  a  need. 

Which  brings  us  back  to  educat¬ 
ing  users.  Sure,  it  seems  hopeless. 
But  we’ve  got  to  redouble  our  ef¬ 
forts  to  make  users  understand  that 
the  threat  from  worms  and  viruses 
is  real  and  that  the  damage  costs  all 
of  us  —  including  them.  We  can  try 
to  beef  up  operating  systems  and 
ISPs  and  the  Internet.  But  ultimate¬ 
ly,  users  are  the  ones  who  can  stop 
those  weapons  of  mass  Destruc¬ 
tion  —  maybe  the  only  ones. 

Education  may  not  be  much.  But 
until  we  come  up  with  a  better 
idea,  it’s  all  we’ve  got.  ©  44569 


frank  haves,  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@computerworld.com. 


It’s  All  in  the  Debugging 

Tnis  VP  of  IT  regularly  assigns  impossible  deadlines, 
fails  to  provide  resources  and  generates  a  high  stress 
level.  "The  extreme  stress  caused  many  employees  to 
frequently  cal!  in  sick,”  says  pilot  fish  at  the  company. 
No,  it  can’t  be  the  stress  that’s  doing  it,  VP  decides  ~ 
it  must  be  germs  in  the  ice  machine.  “He  had  the 
machine  completely  disinfected  and  then  handed  out 
cans  of  Lysoi  for  us  to  spray  our  cubicles  each  night," 
fish  says.  “Everyone  still  continued  to  call  in  sick,  and 
most  left  for  other  jobs,  but  we  did  have  the  most 
germ-free  environment  in  the  company.” 

NotYourJob 

Confidential  In  SHARK 

formation  for  riill/ 

this  project  lANKfe 

needs  to  be  de¬ 
stroyed,  so  on  his  break 
this  pilot  fish  decides  to 


doing  home¬ 
work  in  the 
computer  lab 
when  a  main¬ 
tenance  man 
:  walks  in.  “Without  say- 
j  ing  a  word,  he  pulls  the 


feed  the  shredder.  ‘The  j  main  power  switch,” 
president  walked  by,  saw  j  says  a  net  admin  pilot 
what  I  was  doing  and  I  fish  on  the  scene.  “Need- 
said  developers  shouldn't  j  less  to  say,  there’s  a 
spend  their  time  doing  I  panic  -  the  kids  just  lost 
this,”  reports  fish.  Give  it  j  all  their  homework, 
to  an  admin,  says  the  j  'What  are  you  doing?’ 
prez.  “Now,  when  I  need  j  they  say,  ‘We  didn’t  back 
j  ail  our  work  up!’ So  the 
j  maintenance  guy  turns 
j  everything  back  on  and 
j  says,  UK,  you  can  back 
up  new.  But  after  that. 


a  break,  I  play  games 
and  let  someone  else 
shred  documents,'’  fish 
says.  “The  president  is 
happier  this  way.*8 


Go  Team! 

Notoriously  clueless  j 
sate  VP  complains  that  j 
his  mouse  doesn’t  work,  \ 
and  right  away  this  IT  pi-  j 
lot  fish  can  see  why.  “He  j 
put  tape  on  the  bottom  j 
of  the  optical  mouse  be-  j 
cause  he  thought  the  ! 
laser  would  damage  his  j 
eyes,"  fish  grumbles.  I 
“He  didn’t  understand  \ 
why  the  mouse  wouldn’t  i 
work  after  that.  After  j 
secretly  taking  off  the  j 
tape,  l  told  him  the  prob-  j 
fern  was  his  mouse  pad  i 
for  a  college  basketball  j 
team  S  disliked.” 


I’m  gonna  have  to  work 
sn  these  lights.’  ” 


Gee,  Thanks 

It’s  late  in  the  day,  and 
these  high  schoolers  are 


Let’s  Walk 
Through  This 
Again . . . 

_  This  user  on  the  fre- 
!  guent-caller  plan  tells 
{  help  desk  pilot  fish  she 
!  needs  her  password  re- 
j  set  -  again.  User  says 
!  she’s  having  trouble  re- 
j  memberingthecompH- 
I  cated  passwords  re- 
j  puked  by  a  new  ST  poli- 
j  cy.  Have  you  considered 
|  writing  your  password 
|  down  and  hiding  it 
j  somewhere?  fish  asks, 
j  “Yes "says user. “I 
:  wrw  it  tuiwwifB  yw&wt  uay 
j  and  put  it  in  my  shoe, 

|  but  I’m  wearing 
i  ent  pair  today.” 


OFEED  THE  SHARK!  Send  your  true  tales  of  IT  life  to 
sharky@computerworfd.com.  You  snag  a  snazzy 
Shark  shirt  if  we  use  it.  And  check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  for  Shark  Tank  home  delivery  at 
comptrterworM.conVsharky. 


Time  is  money.  So  it’s  important  to  get  new  business  software  up  and  running  quickly.  Which  is  why  SAP*  solutions  built  on  the  open 
SAP  NetWeaver'”  platform  make  so  much  sense.  Because  they’re  designed  with  fast  implementation  in  mind,  you  can  see  business  results  quickly. 
Visit  sap.com/speed  or  call  800  880  1727  to  see  how  fast  SAP  can  make  things  happen  for  your  company. 
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Faster  than  Verizon. 
Faster  than  Sprint  PCS. 
Faster  than  Cingular. 
Faster  than  T-Mobi!e. 
Faster  than  Nextel. 


For  the  fastest  way  to  open  large  e-mail  attachments  on 
a  national  wireless  network,  switch  to  AT&T  Wireless. 

It's  a  fact.  No  one  offers  a  faster  national  wireless  data  network  than  AT&T  Wireless  with  EDGE 
technology.  No  one.  With  average  speeds  of  100-130  Kbps,  bursts  of  up  to  200  Kbps  and  secure 
wireless  access,  you  can  browse  the  Internet  as  well  as  download  presentations,  documents  and 
spreadsheets  nearly  twice  as  fast  as  with  any  other  national  wireless  data  network.  We  work 
with  leading  IT  companies  to  help  you  get  more  out  of  the  technology  you  use  every  day,  across 
the  U.S.  High-speed  national  wireless  data  is  here.  And  no  one  is  faster  at  it  than  AT&T  Wireless. 
Call  1  888-DATA-288  or  go  to  attwireless.com/speed 


Access  the  fastest  national 
wireless  data  network  with 
an  easy-to-use  PC  card. 


Open  e-mail  attachments  at 
average  speeds  of  100-130  Kbps 
and  bursts  of  up  to  200  Kbps. 


Download  large  documents, 
presentations  and  reports 
in  just  seconds. 


Faster  data  speeds  from  more 
places  in  the  U.S.  than  with 
any  other  wireless  carrier. 


reach out 

on  the  wireless  service  America  trusts” 


AT&T  Wireless 
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